Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-7135 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T20:50:06.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/functions.inc.php in PHP Poll Creator (phpPC) 1.04 allows remote attackers to execute arbitrary PHP code via a URL in the relativer_pfad parameter, a different vector and version than CVE-2005-1755. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29393
CVE ID: CVE-2006-7136 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T20:50:06.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PHP Poll Creator (phpPC) 1.04 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the relativer_pfad parameter to (1) poll.php, (2) poll_kommentar.php, and (3) poll_sm.php, different vectors and version than CVE-2005-1755. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/15510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29393 - http://www.securityfocus.com/bid/21245 - https://www.exploit-db.c
//exchange.xforce.ibmcloud.com/vulnerabilities/29393 - http://www.securityfocus.com/bid/21245 - https://www.exploit-db.com/exploits/2827
CVE ID: CVE-2006-7137 State: PUBLISHED Published: 2007-03-07T00:00:00 Last Updated: 2024-08-07T20:50:06.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TinyPortal before 0.8.6 allows remote attackers to inject arbitrary web script or HTML via the shoutbox. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19357 - http://www.securityfocus.com/archive/1/462018/100/0/threaded - http://www.securityfocus.com/archive/1/442308/100/0/threaded
CVE ID: CVE-2006-7138 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:50:06.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW_UTILITIES package for Oracle APEX/HTMLDB before 2.2 allows remote authenticated users to execute arbitrary SQL by modifying the P_LOV parameter and calculating a matching MD5 checksum for the P_LOV_CHECKSUM parameter. NOTE: it is likely that this issue is subsumed by CVE-2006-5351, but due to lack of details from Oracle, this cannot be proven. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/adv
not be proven. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html - http://www.red-database-security.com/advisory/oracle_apex_sql_injection_wwv_flow_utilities.html - http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050265.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30106 - http://www.securityfocus.com/archive/1/449498/100/0/threaded - http://securityreason.com/securityalert/2346
CVE ID: CVE-2006-7139 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:50:06.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service (crash) via an HTML e-mail with certain table and frameset tags that trigger a segmentation fault, possibly involving invalid free or delete operations. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24889 - http://www.securityfocus.com/archive/1/448766/100/0/threaded - http://www.novell.com/linux/security/advisories/2007_6_sr.html - http://www.securityfocus.co
e/1/448766/100/0/threaded - http://www.novell.com/linux/security/advisories/2007_6_sr.html - http://www.securityfocus.com/archive/1/448768/100/0/threaded - http://www.securityfocus.com/bid/20539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29557 - http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0293.html - http://securityreason.com/securityalert/2347
CVE ID: CVE-2006-7140 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:50:06.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The libike library, as used by in.iked, elfsign, and kcfd in Sun Solaris 9 and 10, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents libike from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1 - http://
otes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102722-1 - http://www.vupen.com/english/advisories/2006/4744 - http://secunia.com/advisories/23104 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1648
CVE ID: CVE-2006-7141 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:50:06.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in Oracle Database Server, when utl_file_dir is set to a wildcard value or "CREATE ANY DIRECTORY to PUBLIC" privileges exist, allows remote authenticated users to read and modify arbitrary files via full filepaths to utl_file functions such as (1) utl_file.put_line and (2) utl_file.get_line, a related issue to CVE-2005-0701. NOTE: this issue is disputed by third parties who state that this is due to an insecure configuration instead of an inherent vulnerability Additional Analyst Notes: -
ho state that this is due to an insecure configuration instead of an inherent vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.0xdeadbeef.info/exploits/raptor_orafile.sql - http://www.securityfocus.com/archive/1/455047/100/0/threaded - http://www.securityfocus.com/archive/1/454964/100/0/threaded - http://www.securityfocus.com/archive/1/454862/100/0/threaded
CVE ID: CVE-2006-7142 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:50:06.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: The centralized management feature for Utimaco Safeguard stores hard-coded cryptographic keys in executable programs for encrypted configuration files, which allows attackers to recover the keys from the configuration files and decrypt the disk drive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/448598/100/0/threaded - http://www.utimaco.fi/servlets/ActionDispatcher?action:ws3_content_get_binary=true&scope=domain&domain_id=www.utimaco.fi&page_id=/templates/ajankohtaist
ctionDispatcher?action:ws3_content_get_binary=true&scope=domain&domain_id=www.utimaco.fi&page_id=/templates/ajankohtaisteksti.jsp?ws3_page_id=tiedoteartikkeli_103&form_id=&component_id=linkin_dokumentti_104 - http://www.securityfocus.com/bid/20529 - http://www.securityfocus.com/archive/1/449120/100/0/threaded
CVE ID: CVE-2006-7143 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:50:06.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Call Center Software 0.93 and earlier allows remote attackers to inject arbitrary web script or HTML via the problem description field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/448423/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0217.html - http://securityreason.com/securityalert/2389 - http://www.mayhemiclabs.com/advisories/MHL-2006-002.txt - http://secunia.com/advisories/22365 - http://
rityalert/2389 - http://www.mayhemiclabs.com/advisories/MHL-2006-002.txt - http://secunia.com/advisories/22365 - http://www.securityfocus.com/bid/20474
CVE ID: CVE-2006-7144 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:50:06.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the user name in the login page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/448423/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0217.html - http://securityreason.com/securityalert/2389 - http://www.mayhemiclabs.com/advisories/MHL-2006-002.txt - http://secunia.com/advisories/22365
n.com/securityalert/2389 - http://www.mayhemiclabs.com/advisories/MHL-2006-002.txt - http://secunia.com/advisories/22365 - http://www.securityfocus.com/bid/20474
CVE ID: CVE-2006-7145 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:50:06.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: edit_user.php in Call Center Software 0.93 and earlier allows remote attackers to obtain sensitive information such as account passwords via a modified user_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/448423/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0217.html - http://securityreason.com/securityalert/2389 - http://www.mayhemiclabs.com/advisories/MHL-2006-002.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
/2389 - http://www.mayhemiclabs.com/advisories/MHL-2006-002.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/29486 - http://secunia.com/advisories/22365 - http://www.securityfocus.com/bid/20474
CVE ID: CVE-2006-7146 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:50:06.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in bug.php in Leicestershire communityPortals 1.0 build 20051018 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cp_root_path parameter, a different vector than CVE-2006-5280. NOTE: CVE disputes this issue, since bug.php is not in communityPortals source distributions Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20467 - http://securityreason.com/securityalert/2387 - http://www.securityfocus.com/archiv
p://www.securityfocus.com/bid/20467 - http://securityreason.com/securityalert/2387 - http://www.securityfocus.com/archive/1/448311/100/0/threaded
CVE ID: CVE-2006-7147 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:50:06.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Import Tools Mod 0.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2531 - http://www.securityfocus.com/bid/20525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29512
CVE ID: CVE-2006-7148 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:57:40.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/bb_usage_stats.php in maluinfo 206.2.38 for Brazilian PHPBB allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter. NOTE: this might be the same issues as CVE-2006-4893. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29516 - http://www.securityfocus.com/archive/1/448639/100/0/threaded - http://securityreason.com/securityalert/2380
CVE ID: CVE-2006-7149 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:57:39.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.x allow remote attackers to inject arbitrary web script or HTML via (1) the query string to (a) index.php, which reflects the string in an error message from mod_login.php; and the (2) mcname parameter to (b) moscomment.php and (c) com_comment.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449305/100/0/threaded - http://securityreason.com/securityalert/2379 - https://exchange.xforce.ibmcloud.com/vulner
ive/1/449305/100/0/threaded - http://securityreason.com/securityalert/2379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29708 - http://www.securityfocus.com/bid/20650 - http://www.kapda.ir/advisory-444.html
CVE ID: CVE-2006-7150 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:57:39.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary SQL commands via the mcname parameter to (1) moscomment.php and (2) com_comment.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449305/100/0/threaded - http://securityreason.com/securityalert/2379 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29707 - http://www.securityfocus.com/bid/20650 - http://www.kapda.ir/advisory-444.html
CVE ID: CVE-2006-7151 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:57:39.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the libtool-ltdl library (libltdl.so) 1.5.22-2.3 in Fedora Core 5 might allow local users to execute arbitrary code via a malicious library in the (1) hwcap, (2) 0, and (3) nosegneg subdirectories. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2378 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=209930 - http://www.securityfocus.com/bid/20434 - http://www.securityfocus.com/archive/1/448153/100/0/threaded
CVE ID: CVE-2006-7152 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:57:39.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo cookie values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21309 - https://www.exploit-db.com/exploits/2849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30541
CVE ID: CVE-2006-7153 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:57:39.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary code via a URL in the pathToFiles parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2371 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30253 - http://www.securityfocus.com/archive/1/451402/100/0/threaded
CVE ID: CVE-2006-7154 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:57:39.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Iono allows remote attackers to obtain the full server path via certain requests to (1) templates/iono/admin/denied.tpl.php, (2) templates/iono/admin/index.tpl.php, and (a) other unspecified files in templates/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29505 - http://securityreason.com/securityalert/2386 - http://www.osvdb.org/32410 - http://www.osvdb.org/32412 - http://www.osvdb.org/32411 - http://www.securityfocus.com/archive/1/448446/100/0/threaded
CVE ID: CVE-2006-7155 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:57:39.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of service and replay attacks. NOTE: this issue might be related to CVE-2006-5286. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2007-March/001410.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30218 - http://www.securityfocus.com/bid/21014 - http://secunia.com/advisories/22699 - https://s
oud.com/vulnerabilities/30218 - http://www.securityfocus.com/bid/21014 - http://secunia.com/advisories/22699 - https://secure-support.novell.com/KanisaPlatform/Publishing/201/3003139_f.SAL_Public.html - http://www.osvdb.org/30338 - http://www.vupen.com/english/advisories/2006/4471 - http://securitytracker.com/id?1017213
CVE ID: CVE-2006-7156 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:57:39.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in addon_keywords.php in Keyword Replacer (keyword_replacer) 1.0 and earlier, a module for miniBB, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22401 - https://www.exploit-db.com/exploits/2528 - http://www.attrition.org/pipermail/vim/2007-March/001411.html - http://www.vupen.com/english/advisories/2006/4026 - http://www.osvdb.org/29709 - http://w
l/vim/2007-March/001411.html - http://www.vupen.com/english/advisories/2006/4026 - http://www.osvdb.org/29709 - http://www.securityfocus.com/bid/20492
CVE ID: CVE-2006-7157 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:57:39.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Google Earth v4.0.2091 (beta) allows remote user-assisted attackers to cause a denial of service (crash) via a KML or KMZ file with a long href element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20464 - http://www.securityfocus.com/archive/1/448544/100/0/threaded - http://securitydot.net/xpl/exploits/vulnerabilities/articles/1660/exploit.html - http://securityreason.com/securityalert/2375 - http://marc.info/?l=full-disclosure&m=116068034629718&w=2 - htt
it.html - http://securityreason.com/securityalert/2375 - http://marc.info/?l=full-disclosure&m=116068034629718&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29502
CVE ID: CVE-2006-7158 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:57:39.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Oracle Application Express (APEX) before 2.2.1, aka Oracle HTML DB, allows remote attackers to inject arbitrary web script or HTML via the NOTIFICATION_MSG parameter. NOTE: it is likely that this issue overlaps one of the identifiers in CVE-2006-5351. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_apex_css_notification_msg.html - http://securityreason.com/securityalert/2382 - https://exchange.xforce.ibmcloud.com/v
e_apex_css_notification_msg.html - http://securityreason.com/securityalert/2382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30107 - http://secunia.com/advisories/22396 - http://www.securityfocus.com/archive/1/449501/100/0/threaded
CVE ID: CVE-2006-7159 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:57:39.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka btitracker) allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22322 - http://securityreason.com/securityalert/2377 - http://www.securityfocus.com/bid/20422 - http://www.securityfocus.com/archive/1/447928/100/0/threaded
CVE ID: CVE-2006-7160 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:57:39.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not validate arguments to hooked SSDT functions, which allows local users to cause a denial of service (crash) via invalid arguments to the (1) NtAssignProcessToJobObject,, (2) NtCreateKey, (3) NtCreateThread, (4) NtDeleteFile, (5) NtLoadDriver, (6) NtOpenProcess, (7) NtProtectVirtualMemory, (8) NtReplaceKey, (9) NtTerminateProcess, (10) NtTerminateThread, (11) NtUnloadDriver, and (12) NtWriteVirtualMemory functions. Additional Analyst Note
teProcess, (10) NtTerminateThread, (11) NtUnloadDriver, and (12) NtWriteVirtualMemory functions. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30312 - http://www.vupen.com/english/advisories/2006/4537 - http://www.securityfocus.com/archive/1/451672/100/0/threaded - http://secunia.com/advisories/22913 - http://www.matousec.com/info/advisories/Outpost-Multiple-insufficient-argument-validation-of-hooked-SSDT-functions.php - http://www.securityfocus.com/bid/21097
CVE ID: CVE-2006-7161 State: PUBLISHED Published: 2007-03-07T20:00:00 Last Updated: 2024-08-07T20:57:40.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in giris_yap.asp in Hazir Site 2.0 allows remote attackers to bypass authentication via the (1) k_a class or (2) sifre parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20375 - http://www.securityfocus.com/archive/1/447829/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29371 - http://securityreason.com/securityalert/2374
CVE ID: CVE-2006-7162 State: PUBLISHED Published: 2007-03-07T21:00:00Z Last Updated: 2024-09-16T17:18:10.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: PuTTY 0.59 and earlier uses weak file permissions for (1) ppk files containing private keys generated by puttygen and (2) session logs created by putty, which allows local users to gain sensitive information by reading these files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24381 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=400804
CVE ID: CVE-2006-7163 State: PUBLISHED Published: 2007-03-10T00:00:00Z Last Updated: 2024-09-16T16:57:39.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: DreameeSoft Password Master 1.0 stores the database in an unencrypted format when the master password is set, which allows attackers with physical access to read the database contents via an unspecified authentication bypass. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19983
CVE ID: CVE-2006-7164 State: PUBLISHED Published: 2007-03-20T10:00:00Z Last Updated: 2024-09-16T22:56:50.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: SimpleFileServlet in IBM WebSphere Application Server 5.0.1 through 5.0.2.7 on Linux and UNIX does not block certain invalid URIs and does not issue a security challenge, which allows remote attackers to read secure files and obtain sensitive information via certain requests. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg24013029