Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2288 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:29.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Avahi before 0.6.10 allows local users to cause a denial of service (mDNS/DNS-SD service disconnect) via unspecified mDNS name conflicts. Additional Analyst Notes: - CVE Program Container: References: - http://0pointer.de/cgi-bin/viewcvs.cgi/%2Acheckout%2A/trunk/docs/NEWS?root=avahi - http://secunia.com/advisories/20022 - http://www.securityfocus.com/bid/17884 - http://www.novell.com/linux/security/advisories/2006_05_19.html - http://secunia.com/advisories/20215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26330
CVE ID: CVE-2006-2289 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:29.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://0pointer.de/cgi-bin/viewcvs.cgi/%2Acheckout%2A/trunk/docs/NEWS?root=avahi - http://secunia.com/advisories/20022 - http://www.securityfocus.com/bid/17884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26331 - http://www.novell.com/linux/security/advisories/2006_05_19.html - http://secunia.com/advisories/20215
CVE ID: CVE-2006-2290 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:29.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in kommentar.php in 2005-Comments-Script allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) email, and (3) url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26318 - http://d4igoro.blogspot.com/2006/05/c2005-comments-script-xss.html - http://secunia.com/advisories/19996 - http://www.vupen.com/english/advisories/2006/1706 - http://www.securityfocus.com/bid/17895
CVE ID: CVE-2006-2291 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:28.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in calendar_new.asp in IA-Calendar allows remote attackers to inject arbitrary web script or HTML via the TypeName1 parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26361 - http://secunia.com/advisories/20037 - http://www.vupen.com/english/advisories/2006/1731 - http://www.osvdb.org/25354 - http://www.
unia.com/advisories/20037 - http://www.vupen.com/english/advisories/2006/1731 - http://www.osvdb.org/25354 - http://www.securityfocus.com/bid/17925
CVE ID: CVE-2006-2292 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:29.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in IA-Calendar allow remote attackers to execute arbitrary SQL commands via the (1) type parameter in (a) calendar_new.asp and (b) default.asp, and (2) ID parameter in (c) calendar_detail.asp. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25351 - http://www.osvdb.org/25353 - http://www.osvdb.org/25352 - http://secunia.com/advisories/20037 - ht
www.osvdb.org/25351 - http://www.osvdb.org/25353 - http://www.osvdb.org/25352 - http://secunia.com/advisories/20037 - http://www.vupen.com/english/advisories/2006/1731 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26360 - http://www.securityfocus.com/bid/17925
CVE ID: CVE-2006-2293 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:28.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in all_calendars.asp in MultiCalendars 3.0 allows remote attackers to execute arbitrary SQL commands via the calsids parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20030 - http://www.osvdb.org/25428 - http://www.vupen.com/english/advisories/2006/1750 - http://www.securityfocus.com/bid/17903 - https://exchange.xforce.ibmcloud.com/vulner
.com/english/advisories/2006/1750 - http://www.securityfocus.com/bid/17903 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26362 - http://downloads.securityfocus.com/vulnerabilities/exploits/multicalendars-3.0-sql-inj.txt
CVE ID: CVE-2006-2294 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:29.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in (1) index.php and (2) galerie.php. NOTE: this issue might be resultant from directory traversal. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1699 - http://d4igoro.blogspot.com/2006/05/dynamic-galerie-10-path-traversal-xss.html - http://www.securityfocus.com/bid/17896 - http://www.osvdb.org/25444 - http://www.osv
alerie-10-path-traversal-xss.html - http://www.securityfocus.com/bid/17896 - http://www.osvdb.org/25444 - http://www.osvdb.org/25443 - http://secunia.com/advisories/19995
CVE ID: CVE-2006-2295 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:29.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access arbitrary files via an absolute path in the pfad parameter to (1) index.php and (2) galerie.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1699 - http://d4igoro.blogspot.com/2006/05/dynamic-galerie-10-path-traversal-xss.html - http://www.securityfocus.com/bid/17896 - http://secunia.com/advisories/19995 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26322
CVE ID: CVE-2006-2296 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:29.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search_result.asp in EDirectoryPro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26319 - http://downloads.securityfocus.com/vulnerabilities/exploits/edirectorypro-sql-i
rce.ibmcloud.com/vulnerabilities/26319 - http://downloads.securityfocus.com/vulnerabilities/exploits/edirectorypro-sql-inj.txt - http://www.securityfocus.com/bid/17912 - http://secunia.com/advisories/20017 - http://www.osvdb.org/25334
CVE ID: CVE-2006-2297 State: PUBLISHED Published: 2006-05-10T01:00:00 Last Updated: 2024-08-07T17:43:29.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to execute arbitrary code via a crafted CHM / ITS file that triggers the overflow while decompiling. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17926 - http://www.vupen.com/english/advisories/2006/1761 - http://securityreason.com/securityalert/886 - http://secunia.com/advisories/20061 - http://www.securityfocus.com/archive/1/433435/100/0/threaded - http://www.s
/886 - http://secunia.com/advisories/20061 - http://www.securityfocus.com/archive/1/433435/100/0/threaded - http://www.securityfocus.com/archive/1/433854/100/0/threaded - http://www.reversemode.com/advisories/advisory-itss.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/26340 - http://www.osvdb.org/25501 - http://www.securityfocus.com/archive/1/433833/30/5040/threaded
CVE ID: CVE-2006-2298 State: PUBLISHED Published: 2006-05-10T10:00:00 Last Updated: 2024-08-07T17:43:29.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked daemon crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. Additional Analyst Notes: - CVE Program Container: References: - http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en - http://www.securityfocus.com/bid/17902 - http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/ - https://exchange.xforce.ibmcloud
focus.com/bid/17902 - http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/26311 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102246-1 - http://www.vupen.com/english/advisories/2006/1733 - http://securitytracker.com/id?1016043 - http://secunia.com/advisories/20050
CVE ID: CVE-2006-2300 State: PUBLISHED Published: 2006-05-11T10:00:00 Last Updated: 2024-08-07T17:43:29.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in EImagePro allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter to subList.asp, (2) SubjectID parameter to imageList.asp, or (3) Pic parameter to view.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25332 - http://www.securityfocus.com/bid/17911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26343 - http://www.osvdb.org/25331 - http://www.vupen.com/english/advisories/2006/1749 - http://secunia.com/advisor
ties/26343 - http://www.osvdb.org/25331 - http://www.vupen.com/english/advisories/2006/1749 - http://secunia.com/advisories/20043 - http://www.osvdb.org/25333 - http://downloads.securityfocus.com/vulnerabilities/exploits/eimagepro-xss.txt
CVE ID: CVE-2006-2301 State: PUBLISHED Published: 2006-05-11T10:00:00 Last Updated: 2024-08-07T17:43:29.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin_default.asp in OzzyWork Galeri allows remote attackers to execute arbitrary SQL commands via the (1) Login or (2) password fields. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26364 - http://www.vupen.com/english/advisories/2006/1768 - http://securitytracker.com/id?1016053 - http://www.securityfocus.com/bid/17923 - http://secunia.com/advisories/20049 - http://www.osvdb.org/25426 - http://www.securityfocus.com/archive/1
om/bid/17923 - http://secunia.com/advisories/20049 - http://www.osvdb.org/25426 - http://www.securityfocus.com/archive/1/433358 - http://securityreason.com/securityalert/866
CVE ID: CVE-2006-2302 State: PUBLISHED Published: 2006-05-11T10:00:00 Last Updated: 2024-08-07T17:43:29.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin_default.asp in DUGallery 2.x allows remote attackers to execute arbitrary SQL commands via the (1) Login or (2) password field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26374 - http://www.securityfocus.com/bid/17918 - http://securityreason.com/securityalert/867 - http://www.securityfocus.com/archive/1/433410
CVE ID: CVE-2006-2303 State: PUBLISHED Published: 2006-05-11T10:00:00 Last Updated: 2024-08-07T17:43:29.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Application Scripting (XAS) vulnerability in ICQ Client 5.04 build 2321 and earlier allows remote attackers to inject arbitrary web script from one application into another via a banner, which is processed in the My Computer zone using the Internet Explorer COM object. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1765 - http://www.securityfocus.com/archive/1/433360/100/0/threaded - http://www.securityfocus.com/bid/17913 - http://securitytracker.com/id?10160
focus.com/archive/1/433360/100/0/threaded - http://www.securityfocus.com/bid/17913 - http://securitytracker.com/id?1016045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26386 - http://securityreason.com/securityalert/868 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045916.html - http://secunia.com/advisories/20010
CVE ID: CVE-2006-2304 State: PUBLISHED Published: 2006-05-11T10:00:00 Last Updated: 2024-08-07T17:43:29.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the DPRPC library (DPRPCW32.DLL) in Novell Client 4.83 SP3, 4.90 SP2 and 4.91 SP2 allow remote attackers to execute arbitrary code via an XDR encoded array with a field that specifies a large number of elements, which triggers the overflows in the ndps_xdr_array function. NOTE: this was originally reported to be a buffer overflow by Novell, but the original cause is an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016052 - http://
erflow. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016052 - http://secunia.com/advisories/20048 - http://www.vupen.com/english/advisories/2006/1759 - http://www.hustlelabs.com/novell_ndps_advisory.pdf - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046048.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26314 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973719.htm - http://www.securityfocus.com/bid/17931 - http://www.securityfocus.com/archive/1/434017/100/0/threaded - http://www.osvdb.org/25429
CVE ID: CVE-2006-2305 State: PUBLISHED Published: 2006-05-11T10:00:00 Last Updated: 2024-08-07T17:43:29.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Jadu CMS allow remote attackers to inject arbitrary web script or HTML via the (1) forename, (2) surname, (3) reg_email, (4) email_conf, (5) company, (6) city, (7) postcode, or (8) telephone parameters to site/scripts/register.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17929 - https://exchange.xforce.ibmclou
t Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17929 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26349 - http://secunia.com/advisories/20053 - http://www.vupen.com/english/advisories/2006/1760 - http://www.osvdb.org/25430
CVE ID: CVE-2006-2306 State: PUBLISHED Published: 2006-05-11T10:00:00 Last Updated: 2024-08-07T17:43:29.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in moreinfo.asp in EPublisherPro allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1751 - http://www.securityfocus.com/bid/17907 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26344 - http://www.osvdb.org/25330 - http://
yfocus.com/bid/17907 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26344 - http://www.osvdb.org/25330 - http://secunia.com/advisories/20006
CVE ID: CVE-2006-2307 State: PUBLISHED Published: 2006-05-11T10:00:00 Last Updated: 2024-08-07T17:43:29.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Website Baker CMS before 2.6.4 allows remote attackers to inject arbitrary web script or HTML via a user display name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17868 - http://www.securityfocus.com/archive/1/434714/100/0/threaded - http://www.vupen.com/english/advisories/2006/1840 - http://securityreason.com/securityalert/889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26326 - http://www.securityfocus.com/archive/1/43
curityalert/889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26326 - http://www.securityfocus.com/archive/1/433130/100/0/threaded - http://secunia.com/advisories/20081
CVE ID: CVE-2006-2308 State: PUBLISHED Published: 2006-06-02T00:00:00 Last Updated: 2024-08-07T17:43:29.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the IMAP service in EServ/3 3.25 allows remote authenticated users to read other user's email messages, create/rename arbitrary directories on the system, and delete empty directories via directory traversal sequences in the (1) CREATE, (2) SELECT, (3) DELETE, (4) RENAME, (5) COPY or (6) APPEND commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20059 - http://securityreason.com/securityalert/1006 - https://exchange.xforce.ibmcloud.com/vu
://secunia.com/advisories/20059 - http://securityreason.com/securityalert/1006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26738 - http://secunia.com/secunia_research/2006-37/advisory/ - http://www.vupen.com/english/advisories/2006/2066 - http://www.securityfocus.com/bid/18179 - http://www.securityfocus.com/archive/1/435415/100/0/threaded - http://www.eserv.ru/ru/news/news_detail.php?ID=235
CVE ID: CVE-2006-2309 State: PUBLISHED Published: 2006-06-02T00:00:00 Last Updated: 2024-08-07T17:43:29.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, and slash characters, which reveals the source code of script files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20059 - http://securityreason.com/securityalert/1006 - http://secunia.com/secunia_research/2006-37/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/26741 - http://www.vupen.com/english/advisories/2006/2066 - http:/
https://exchange.xforce.ibmcloud.com/vulnerabilities/26741 - http://www.vupen.com/english/advisories/2006/2066 - http://www.securityfocus.com/bid/18179 - http://www.securityfocus.com/archive/1/435415/100/0/threaded - http://www.eserv.ru/ru/news/news_detail.php?ID=235
CVE ID: CVE-2006-2310 State: PUBLISHED Published: 2006-06-26T10:00:00 Last Updated: 2024-08-07T17:43:29.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service (hang) via a request for a .cfm file whose name contains an MS-DOS device name such as (1) con, (2) aux, (3) com1, and (4) com2. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19180 - http://www.securityfocus.com/bid/18624 - http://secunia.com/secunia_research/2006-18/advisory - http://www.vupen.com/english/advisories/2006/2502
CVE ID: CVE-2006-2311 State: PUBLISHED Published: 2006-06-26T10:00:00 Last Updated: 2024-08-07T17:43:29.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to inject arbitrary web script or HTML via the filename in a request to a (1) .cfm or (2) .cfml file, which reflects the result in the default error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18623 - http://secunia.com/advisories/19180 - http://secunia.com/secunia_research/2006-18/advisory - http://www.vupen.com/english/advisories/2006/2502
CVE ID: CVE-2006-2312 State: PUBLISHED Published: 2006-05-19T21:00:00 Last Updated: 2024-08-07T17:43:29.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in the URI handler in Skype 2.0.*.104 and 2.5.*.0 through 2.5.*.78 for Windows allows remote authorized attackers to download arbitrary files via a URL that contains certain command-line switches. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0549.html - http://www.securityfocus.com/bid/18038 - http://www.kb.cert.org/vuls/id/466428 - http://www.vupen.com/english/advisories/2006/1871 - https://exchange.xforce.ibmclo
tp://www.kb.cert.org/vuls/id/466428 - http://www.vupen.com/english/advisories/2006/1871 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26557 - http://www.securityfocus.com/archive/1/434707/30/4860/threaded - http://www.osvdb.org/25658 - http://secunia.com/advisories/20154 - http://www.skype.com/security/skype-sb-2006-001.html
CVE ID: CVE-2006-2313 State: PUBLISHED Published: 2006-05-24T10:00:00 Last Updated: 2024-08-07T17:43:29.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection." Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200607-04.xml - http://secunia.com/advisories/20435 - http://www.securityfocus.com/bid/18092 - http://secunia.com/advisories
07-04.xml - http://secunia.com/advisories/20435 - http://www.securityfocus.com/bid/18092 - http://secunia.com/advisories/20503 - http://secunia.com/advisories/20451 - http://secunia.com/advisories/21001 - http://www.postgresql.org/docs/techdocs.50 - http://secunia.com/advisories/20231 - http://secunia.com/advisories/20653 - http://lists.suse.com/archive/suse-security-announce/2006-Jun/0002.html - http://secunia.com/advisories/20782 - http://www.redhat.com/support/errata/RHSA-2006-0526.html - http://www.trustix.org/errata/2006/0032/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10618 - ftp://patches.sgi.com/support/free/security/advisories/20060602-0
earch/definition/oval%3Aorg.mitre.oval%3Adef%3A10618 - ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc - http://www.vupen.com/english/advisories/2006/1941 - http://www.securityfocus.com/archive/1/435161/100/0/threaded - http://secunia.com/advisories/20232 - http://www.securityfocus.com/archive/1/435038/100/0/threaded - https://usn.ubuntu.com/288-1/ - http://www.mandriva.com/security/advisories?name=MDKSA-2006:098 - http://support.avaya.com/elmodocs2/security/ASA-2006-113.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/26627 - http://secunia.com/advisories/20555 - http://archives.postgresql.org/pgsql-announce/2006-05/msg00010.php - http://securitytracker.co
ia.com/advisories/20555 - http://archives.postgresql.org/pgsql-announce/2006-05/msg00010.php - http://securitytracker.com/id?1016142 - http://www.ubuntu.com/usn/usn-288-2 - http://secunia.com/advisories/20314 - http://www.debian.org/security/2006/dsa-1087
CVE ID: CVE-2006-2314 State: PUBLISHED Published: 2006-05-24T10:00:00 Last Updated: 2024-08-07T17:43:29.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications that use multibyte encodings that allow the "\" (backslash) byte 0x5c to be the trailing byte of a multibyte character, such as SJIS, BIG5, GBK, GB18030, and UHC, which cannot be handled correctly by a client that does not understand multibyte encodings, aka a second variant of "Encoding-Based SQL Injection." NOTE: it coul