Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
lert/425 - http://www.waraxe.us/advisory-44.html - http://www.vupen.com/english/advisories/2006/0542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24650
CVE ID: CVE-2006-0677 State: PUBLISHED Published: 2006-02-14T11:00:00 Last Updated: 2024-08-07T16:41:29.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: telnetd in Heimdal 0.6.x before 0.6.6 and 0.7.x before 0.7.2 allows remote unauthenticated attackers to cause a denial of service (server crash) via unknown vectors that trigger a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18894 - http://secunia.com/advisories/19005 - http://www.vupen.com/english/advisories/2006/0653 - http://www.vupen.com/english/advisories/2006/0456 - http://www.ubuntu.com/usn/usn-253-1 - http://secunia.com/advisories/18961 - https://excha
english/advisories/2006/0456 - http://www.ubuntu.com/usn/usn-253-1 - http://secunia.com/advisories/18961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24763 - http://securityreason.com/securityalert/449 - http://www.securityfocus.com/bid/16676 - http://www.debian.org/security/2006/dsa-977 - http://www.osvdb.org/23244 - http://www.vupen.com/english/advisories/2006/0628 - http://www.securityfocus.com/archive/1/426043/100/0/threaded - http://www.stacken.kth.se/lists/heimdal-discuss/2006-02/msg00028.html
CVE ID: CVE-2006-0678 State: PUBLISHED Published: 2006-02-14T19:00:00 Last Updated: 2024-08-07T16:41:29.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 7.3.x before 7.3.14, 7.4.x before 7.4.12, 8.0.x before 8.0.7, and 8.1.x before 8.1.3, when compiled with Asserts enabled, allows local users to cause a denial of service (server crash) via a crafted SET SESSION AUTHORIZATION command, a different vulnerability than CVE-2006-0553. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.org/errata/2006/0008 - http://www.postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24719 - ht
tgresql.org/docs/8.1/static/release.html#RELEASE-8-1-3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24719 - http://www.vupen.com/english/advisories/2006/0605 - http://secunia.com/advisories/18890 - http://secunia.com/advisories/19035 - http://securityreason.com/securityalert/498 - http://www.securityfocus.com/bid/16650 - http://secunia.com/advisories/19015 - http://www.ubuntu.com/usn/usn-258-1 - http://www.openpkg.org/security/OpenPKG-SA-2006.004-postgresql.html - http://www.securityfocus.com/archive/1/425037/100/0/threaded
CVE ID: CVE-2006-0679 State: PUBLISHED Published: 2006-02-16T20:00:00 Last Updated: 2024-08-07T16:41:29.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the Your_Account module in PHP-Nuke 7.8 and earlier allows remote attackers to execute arbitrary SQL commands via the username variable (Nickname field). Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0358.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24769 - http://secunia.com/advisories/18931 - http://www.osvdb.org/23259 - http://www.securityfocus.com/bid/16691 - http://www.securityfocus.c
.com/advisories/18931 - http://www.osvdb.org/23259 - http://www.securityfocus.com/bid/16691 - http://www.securityfocus.com/archive/1/425173/100/0/threaded - http://securityreason.com/achievement_securityalert/32 - http://securityreason.com/securityalert/440 - http://www.vupen.com/english/advisories/2006/0636
CVE ID: CVE-2006-0680 State: PUBLISHED Published: 2006-02-15T00:00:00 Last Updated: 2024-08-07T16:41:28.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in WebGUI before 6.8.6-gamma allows remote attackers to create an account, when anonymous registration is disabled, via a certain URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18819 - http://www.plainblack.com/getwebgui/advisories/webgui-6.8.6-gamma-released - http://www.securityfocus.com/bid/16612 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24695 - http://www.vupen.com/english/advisories/2006/0541
CVE ID: CVE-2006-0681 State: PUBLISHED Published: 2006-02-15T00:00:00 Last Updated: 2024-08-07T16:41:29.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in powerd.c in Power Daemon (powerd) 2.0.2 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the WHATIDO variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16582 - http://gotfault.net/research/advisory/gadv-powerd.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24713 - http://secunia.com/advisories/18841 - http://www.vupen.com/english/advisories/2006/0545
CVE ID: CVE-2006-0682 State: PUBLISHED Published: 2006-02-15T00:00:00 Last Updated: 2024-08-07T16:41:29.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in bbcodes system in e107 before 0.7.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16614 - http://e107.org/comment.php?comment.news.776 - http://www.vupen.com/english/advisories/2006/0540 - http://secunia.com/advisories/18816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24625
CVE ID: CVE-2006-0683 State: PUBLISHED Published: 2006-02-15T00:00:00 Last Updated: 2024-08-07T16:41:29.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 with v.1 patch and earlier allows remote attackers to inject arbitrary web script or HTML via the username, which is recorded in a log file but not properly handled when the administrator uses the admin log utility to read the log file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24664 - http://secunia.com/advisories/18799 - http://www.securityfocus.com/archive/1/42
rce.ibmcloud.com/vulnerabilities/24664 - http://secunia.com/advisories/18799 - http://www.securityfocus.com/archive/1/424816/100/0/threaded - http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt - http://www.securityfocus.com/bid/16600 - http://www.vupen.com/english/advisories/2006/0534
CVE ID: CVE-2006-0684 State: PUBLISHED Published: 2006-02-15T00:00:00 Last Updated: 2024-08-07T16:41:29.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when a user changes the password, which may allow remote attackers to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24665 - http://secunia.com/advisories/18799 - http://www.securityfocus.com/archive/1/424816/100/0/threaded - http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt - http://www.securityfocus.com/bid/16600
/424816/100/0/threaded - http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt - http://www.securityfocus.com/bid/16600 - http://www.vupen.com/english/advisories/2006/0534
CVE ID: CVE-2006-0685 State: PUBLISHED Published: 2006-02-15T00:00:00 Last Updated: 2024-08-07T16:41:29.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when authentication fails, which allows remote attackers to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18799 - http://www.securityfocus.com/archive/1/424816/100/0/threaded - http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt - http://www.securityfocus.com/bid/16600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24666 - http://w
6-1.txt - http://www.securityfocus.com/bid/16600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24666 - http://www.vupen.com/english/advisories/2006/0534
CVE ID: CVE-2006-0686 State: PUBLISHED Published: 2006-02-15T00:00:00 Last Updated: 2024-08-07T16:41:29.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: add_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user privileges when adding a new administrative user, which allows remote attackers to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24667 - http://secunia.com/advisories/18799 - http://www.securityfocus.com/archive/1/424816/100/0/threaded - http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt -
http://www.securityfocus.com/archive/1/424816/100/0/threaded - http://www.rs-labs.com/adv/RS-Labs-Advisory-2006-1.txt - http://www.securityfocus.com/bid/16600 - http://www.vupen.com/english/advisories/2006/0534
CVE ID: CVE-2006-0687 State: PUBLISHED Published: 2006-02-15T00:00:00 Last Updated: 2024-08-07T16:41:29.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: process.php in DocMGR 0.54.2 does not initialize the $siteModInfo variable when a direct request is made, which allows remote attackers to include arbitrary local files or possibly remote files via a modified includeModule and siteModInfo variable. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/428 - http://www.securityfocus.com/bid/16601 - http://secunia.com/advisories/18803 - http://www.vupen.com/english/advisories/2006/0544 - http://www.securityfocus.com/archive/1/42
nia.com/advisories/18803 - http://www.vupen.com/english/advisories/2006/0544 - http://www.securityfocus.com/archive/1/424818/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24694 - http://retrogod.altervista.org/docmgr_0542_incl_xpl.html
CVE ID: CVE-2006-0688 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16565 - http://www.osvdb.org/22989 - http://secunia.com/advisories/18752 - http://echo.or.id/adv/adv26-K-159-2006.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24603 - http://securitytracker.com/id?1015607 - http://www.vupen.com/eng
://exchange.xforce.ibmcloud.com/vulnerabilities/24603 - http://securitytracker.com/id?1015607 - http://www.vupen.com/english/advisories/2006/0494 - http://echo.or.id/adv/adv27-K-159-2006.txt - http://www.securityfocus.com/archive/1/424549/100/0/threaded
CVE ID: CVE-2006-0689 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Registration Form in TTS Time Tracking Software 3.0 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0524 - http://www.evuln.com/vulns/69/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24572 - http://www.securityfocus.com/bid/16630 - http://www.securityfocus.com/archive/1/425505/100/0/threaded - http://secunia
- http://www.securityfocus.com/bid/16630 - http://www.securityfocus.com/archive/1/425505/100/0/threaded - http://secunia.com/advisories/18854
CVE ID: CVE-2006-0690 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in TTS Time Tracking Software 3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0524 - http://www.evuln.com/vulns/69/summary.html - http://www.securityfocus.com/bid/16630 - http://www.securityfocus.com/archive/1/425505/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24571 - http://secunia.com/advisories/18854
CVE ID: CVE-2006-0691 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0524 - http://www.securityfocus.com/bid/16731 - http://www.evuln.com/vulns/69/summary.html - http://www.securityfocus.com/bid/16630 - http://www.securityfocus.com/archive/1/425505/100/0/threaded - http://secunia.com/advisories/18854 -
us.com/bid/16630 - http://www.securityfocus.com/archive/1/425505/100/0/threaded - http://secunia.com/advisories/18854 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24570
CVE ID: CVE-2006-0692 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the (1) yr, (2) month, (3) day, and (4) job parameters in (a) index.php and (b) changehrs.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16620 - http://www.vupen.com/english/advisories/2006/0522 - http://secunia.com/advisories/18822 - http://securityreason.com/securityalert/451 - http://www.securityfocus.com/archive/1/425316/100/0
com/advisories/18822 - http://securityreason.com/securityalert/451 - http://www.securityfocus.com/archive/1/425316/100/0/threaded - http://www.evuln.com/vulns/67/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24567
CVE ID: CVE-2006-0693 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in rb_auth.php in Roberto Butti CALimba 0.99.2 beta and earlier allow remote attackers to execute arbitrary SQL commands and bypass login authentication via the (1) login and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24578 - http://www.evuln.com/vulns/68/summary.html - http://www.securityfocus.com/archive/1/425364/100/0/threaded - http://www.vupen.c
/www.evuln.com/vulns/68/summary.html - http://www.securityfocus.com/archive/1/425364/100/0/threaded - http://www.vupen.com/english/advisories/2006/0523 - http://securityreason.com/securityalert/453 - http://secunia.com/advisories/18856
CVE ID: CVE-2006-0694 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the loaders (load_*.php) in Ansilove before 1.03 allows remote attackers to read arbitrary files via unspecified vectors involving "converting files accessible by the webserver". Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24681 - http://sourceforge.net/project/shownotes.php?release_id=392826 - http://www.securityfocus.com/bid/16603 - http://secunia.com/advisories/18810
CVE ID: CVE-2006-0695 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24684 - http://www.vupen.com/english/advisories/2006/0536 - http://sourceforge.net/project/shownotes.php?release_id=392826 - http://www.securityfocus.com/bid/16603 - http://secunia.com/
//sourceforge.net/project/shownotes.php?release_id=392826 - http://www.securityfocus.com/bid/16603 - http://secunia.com/advisories/18810
CVE ID: CVE-2006-0696 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Zen Cart before 1.2.7 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0546 - http://www.osvdb.org/23110 - http://secunia.com/advisories/18801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24701 - http://sourceforge.net/project/shownotes.php?release_id=392886
CVE ID: CVE-2006-0697 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zen Cart before 1.2.7 does not protect the admin/includes directory, which allows remote attackers to cause unknown impact via unspecified vectors, probably direct requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0546 - http://secunia.com/advisories/18801 - http://sourceforge.net/project/shownotes.php?release_id=392886
CVE ID: CVE-2006-0698 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerabilities in Zen Cart before 1.2.7 allow remote attackers to cause unknown impact via unspecified vectors related to "other attempted exploits" other than SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0546 - http://secunia.com/advisories/18801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24701 - http://sourceforge.net/project/shownotes.php?release_id=392886
CVE ID: CVE-2006-0699 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in QWikiWiki 1.5, and possibly 1.5.1 and other versions, allows remote attackers to inject arbitrary web script or HTML via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16638 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24669 - http://secunia.com/advisories/18814 - http://insecurity.altervista.org/index.php?m=02&y=06&entry=entry060213-221217 - http://www.vupen.com/english/advisories/2006/05
insecurity.altervista.org/index.php?m=02&y=06&entry=entry060213-221217 - http://www.vupen.com/english/advisories/2006/0562
CVE ID: CVE-2006-0700 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which returns an XML document that lists folders and their permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0570 - http://www.securityfocus.com/archive/1/424745/30/0/threaded - http://secunia.com/advisories/18802 - http://www.securityfocus.com/bid/16594 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24641
CVE ID: CVE-2006-0701 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0570 - http://www.securityfocus.com/archive/1/424745/30/0/threaded - http://secunia.com/advisories/18802 - http://www.securityfocus.com/bid/16594 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24641
CVE ID: CVE-2006-0702 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via .. (dot dot) sequences in the path parameter. NOTE: due to the lack of details, the specific vulnerability type cannot be determined, although it might be due to directory traversal. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0570 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24633 - http://www.securityfocus.com/archive/1/424745/30/0/threa
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24633 - http://www.securityfocus.com/archive/1/424745/30/0/threaded - http://secunia.com/advisories/18802 - http://www.securityfocus.com/bid/16594
CVE ID: CVE-2006-0703 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulnerability involving the query string that is not quoted when inserted into style and body tags, as demonstrated using a bgcol parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0570 - http://www.securityfocus.com/archive/1/450047/100/100/threaded - http://www.securityfocus.com/archive/1/424745/30/0/threaded - http://secunia.com/advisories/188
50047/100/100/threaded - http://www.securityfocus.com/archive/1/424745/30/0/threaded - http://secunia.com/advisories/18802 - http://www.securityfocus.com/archive/1/440586/100/100/threaded - http://www.securityfocus.com/bid/16594 - http://securityreason.com/securityalert/429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24642
CVE ID: CVE-2006-0704 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: iE Integrator 4.4.220114, when configured without a "bespoke error page" in acm.ini, allows remote attackers to obtain sensitive information via a URL that calls a non-existent .aspx script in the integrator/apps directory, which results in an error message that displays the installation path, web server name, IP, and port, session cookie information, and the IIS system username. Additional Analyst Notes: - CVE Program Container: References: - http://www.irmplc.com/advisory016.htm - http://secunia.com/advisories/18813 - https:
VE Program Container: References: - http://www.irmplc.com/advisory016.htm - http://secunia.com/advisories/18813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24714 - http://www.vupen.com/english/advisories/2006/0568
CVE ID: CVE-2006-0705 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in a logging function as used by various SFTP servers, including (1) AttachmateWRQ Reflection for Secure IT UNIX Server before 6.0.0.9, (2) Reflection for Secure IT Windows Server before 6.0 build 38, (3) F-Secure SSH Server for Windows before 5.3 build 35, (4) F-Secure SSH Server for UNIX 3.0 through 5.0.8, (5) SSH Tectia Server 4.3.6 and earlier and 4.4.0, and (6) SSH Shell Server 3.2.9 and earlier, allows remote authenticated users to execute arbitrary commands via unspecified vectors, involving