Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
inition/oval%3Aorg.mitre.oval%3Adef%3A792 - http://secunia.com/advisories/18957 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1020 - http://securitytracker.com/id?1015900 - http://archives.neohapsis.com/archives/bugtraq/2006-04/0227.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25551 - http://www.us-cert.gov/cas/techalerts/TA06-101A.html - http://www.securityfocus.com/bid/17454 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 - http://www.kb.cert.org/vuls/id/341028 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1484 - http://www.vupen.com/english/advisories/20
ecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1484 - http://www.vupen.com/english/advisories/2006/1318
CVE ID: CVE-2006-1190 State: PUBLISHED Published: 2006-04-11T23:00:00 Last Updated: 2024-08-07T17:03:28.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite information when dynamically creating an embedded object, which could cause Internet Explorer to run the object in the wrong security context or zone, and allow remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18957 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1735 - http://securitytracker.com/id?1015900
l.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1735 - http://securitytracker.com/id?1015900 - http://www.securityfocus.com/bid/17455 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1541 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25552 - http://www.vupen.com/english/advisories/2006/1318 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A965 - http://www.kb.cert.org/vuls/id/959649 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1783
CVE ID: CVE-2006-1191 State: PUBLISHED Published: 2006-04-11T23:00:00 Last Updated: 2024-08-07T17:03:28.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is associated with a browser window, which allows remote attackers to obtain sensitive cross-domain information and spoof sites by running script after the user has navigated to another site. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25555 - http://securitytracker.com/id?1015892 - https://oval.cisecurity.org/repository/sea
.ibmcloud.com/vulnerabilities/25555 - http://securitytracker.com/id?1015892 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1251 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 - http://www.securityfocus.com/bid/17457 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1710 - http://www.vupen.com/english/advisories/2006/1318
CVE ID: CVE-2006-1192 State: PUBLISHED Published: 2006-04-11T23:00:00 Last Updated: 2024-08-07T17:03:28.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that allow "window content to persist" after the user has navigated to another site, aka the "Address Bar Spoofing Vulnerability." NOTE: this is a different vulnerability than CVE-2006-1626. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18957 - https://oval.cisecurity.org/repository/search/definition/oval%3
ner: References: - http://secunia.com/advisories/18957 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1498 - http://securityreason.com/securityalert/670 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25557 - http://www.securityfocus.com/bid/17460 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1645 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1336 - http://www.vupen.com/english/advisories/2006/1318 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
w.vupen.com/english/advisories/2006/1318 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1740 - http://securitytracker.com/id?1015899 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1725
CVE ID: CVE-2006-1193 State: PUBLISHED Published: 2006-06-13T19:00:00 Last Updated: 2024-08-07T17:03:28.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016280 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046892.html - http://www.osvdb.org/26441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25550 - http://
006-June/046892.html - http://www.osvdb.org/26441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25550 - http://www.us-cert.gov/cas/techalerts/TA06-164A.html - http://www.securityfocus.com/bid/18381 - http://www.vupen.com/english/advisories/2006/2326 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1161 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1070 - http://www.sec-consult.com/fileadmin/Advisories/20060613-0_owa_xss_noexploit.txt - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-029 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef
s/securitybulletins/2006/ms06-029 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1315 - http://www.kb.cert.org/vuls/id/138188 - http://secunia.com/advisories/20634
CVE ID: CVE-2006-1194 State: PUBLISHED Published: 2006-03-13T22:00:00 Last Updated: 2024-08-07T17:03:28.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in the enet_protocol_handle_incoming_commands function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in products including (1) Cube, (2) Sauerbraten, and (3) Duke3d_w32, allows remote attackers to cause a denial of service (application crash) via a packet with a large command length value, which leads to an invalid memory access. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043541.html - http://
CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043541.html - http://www.securityfocus.com/archive/1/427465/100/0/threaded - http://securitytracker.com/id?1015767 - http://www.securityfocus.com/bid/17087 - http://www.osvdb.org/23844 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25157 - http://secunia.com/advisories/19208 - http://www.vupen.com/english/advisories/2006/0940 - http://aluigi.altervista.org/adv/enetx-adv.txt
CVE ID: CVE-2006-1195 State: PUBLISHED Published: 2006-03-13T22:00:00 Last Updated: 2024-08-07T17:03:28.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: The enet_protocol_handle_send_fragment function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in products including (1) Cube, (2) Sauerbraten, and (3) Duke3d_w32, allows remote attackers to cause a denial of service (application crash) via a packet fragment with a large total data size, which triggers an application abort when memory allocation fails. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043541.html - http://www
Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043541.html - http://www.securityfocus.com/archive/1/427465/100/0/threaded - http://securitytracker.com/id?1015767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25158 - http://www.securityfocus.com/bid/17087 - http://secunia.com/advisories/19208 - http://www.vupen.com/english/advisories/2006/0940 - http://aluigi.altervista.org/adv/enetx-adv.txt - http://www.osvdb.org/23845
CVE ID: CVE-2006-1196 State: PUBLISHED Published: 2006-03-13T22:00:00 Last Updated: 2024-08-07T17:03:28.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in QwikiWiki 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) from and (2) help parameters to (a) index.php; (3) action, (4) page, (5) debug, (6) help, (7) username, or (8) password parameters to (b) login.php; the (7) help parameter to (c) pageindex.php; or (8) help parameter to (d) recentchanges.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23788 - http://secunia.com/advisories/19182 - http://www.secu
CVE Program Container: References: - http://www.osvdb.org/23788 - http://secunia.com/advisories/19182 - http://www.securityfocus.com/bid/17064 - http://www.osvdb.org/23789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25128 - http://kiki91.altervista.org/exploit/qwikiwiki_1.0.5_xss.txt - http://www.osvdb.org/23786 - http://www.vupen.com/english/advisories/2006/0910 - http://www.osvdb.org/23787
CVE ID: CVE-2006-1197 State: PUBLISHED Published: 2006-03-13T22:00:00 Last Updated: 2024-08-07T17:03:28.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: SafeDisc installs the driver service for the secdrv.sys driver with insecure permissions, which allows local users to gain privileges by changing the configuration to reference a malicious program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/427410/100/0/threaded - http://www.securityfocus.com/bid/17070 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25162
CVE ID: CVE-2006-1198 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Comvigo IM Lock 2006 uses a simple substitution cipher to encrypt a password stored in the msnvs\prc registry value, for which all users have Read permission, which allows local users to bypass the product's blocking functionality by decrypting the password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16988 - http://secunia.com/advisories/19140 - http://www.securityfocus.com/archive/1/426935/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25219 - http:
w.securityfocus.com/archive/1/426935/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25219 - http://www.vupen.com/english/advisories/2006/0866
CVE ID: CVE-2006-1199 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in iframe.php in daverave Link Bank allows remote attackers to inject arbitrary web script or HTML via the site parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17001 - http://secunia.com/advisories/19154 - http://www.osvdb.org/23751 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25107 - http://www.securityfocus.com/archive/1/426932/100/0/threaded - http://www.vupen.com/english/advisories/2006/0885
CVE ID: CVE-2006-1200 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in add_link.txt in daverave Link Bank allows remote attackers to execute arbitrary PHP code via the url_name parameter, which is not sanitized before being stored in links.txt, which is later used in an include statement. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19154 - http://securityreason.com/securityalert/553 - http://www.osvdb.org/23750 - http://www.securityfocus.com/bid/17004 - http://www.securityfocus.com/archive/1/426932/10
- http://www.osvdb.org/23750 - http://www.securityfocus.com/bid/17004 - http://www.securityfocus.com/archive/1/426932/100/0/threaded - http://www.vupen.com/english/advisories/2006/0885
CVE ID: CVE-2006-1201 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in resetpw.php in eschew.net phpBannerExchange 2.0 and earlier, and other versions before 2.0 Update 5, allows remote attackers to read arbitrary files via a .. (dot dot) in the email parameter during a "Recover password" operation (recoverpw.php). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19127 - http://www.securityfocus.com/archive/1/426940/100/0/threaded - http://www.vupen.com/english/advisories/2006/0869 - http://www.eschew.net/scripts/p
om/archive/1/426940/100/0/threaded - http://www.vupen.com/english/advisories/2006/0869 - http://www.eschew.net/scripts/phpbe/2.0/releasenotes.php - http://www.osvdb.org/23720 - http://www.h4cky0u.org/advisories/HYSA-2006-004-phpbanner.txt - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0879.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25080 - http://www.securityfocus.com/bid/16996
CVE ID: CVE-2006-1202 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mess and (2) user parameters in messanger.php, possibly requiring a URL encoded value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17029 - http://www.vupen.com/english/advisories/2006/0897 - http://notlegal.ws/textfilebbmessanger.txt - http://www.securityfocus.com/archive/1/427081/100/0/threaded - https://exchange.xforce
egal.ws/textfilebbmessanger.txt - http://www.securityfocus.com/archive/1/427081/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25091 - http://securitytracker.com/id?1015744 - http://secunia.com/advisories/19149
CVE ID: CVE-2006-1203 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in common.php in txtForum 1.0.4-dev and earlier allows remote attackers to include and execute arbitrary PHP code via a URL in the skin parameter to login.php, and possibly other parameters to other PHP scripts, related to include statements in common.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17061 - http://www.seclab.tuwien.ac.at/advisories/TUVSA-0603-004.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/25131 - http://
seclab.tuwien.ac.at/advisories/TUVSA-0603-004.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/25131 - http://www.osvdb.org/23952 - http://www.securityfocus.com/archive/1/427188/100/0/threaded
CVE ID: CVE-2006-1204 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in txtForum 1.0.4-dev and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) prev, (2) next, and (3) rand5 parameters in (a) index.php; the (4) r_username and (5) r_loc parameters in (b) new_topic.php; the (6) r_num, (7) r_family_name, (8) r_icq, (9) r_yahoo, (10) r_aim, (11) r_homepage, (12) r_interests, (13) r_about, (14) selected1, (15) selected0, (16) signature_selected1, (17) signature_selected0, (18) smile_selected1, (19) smile_selected0,
ected1, (15) selected0, (16) signature_selected1, (17) signature_selected0, (18) smile_selected1, (19) smile_selected0, (20) ubb_selected1, and (21) ubb_selected0 parameters in (c) profile.php; the (22) quote and (23) tid parameters in (d) reply.php; and the (24) tid, (25) sticked, and (26) mid parameters in (e) view_topic.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23957 - http://www.securityfocus.com/bid/17054 - http://www.osvdb.org/23953 - http://www.osvdb.org/23956 - http://www.seclab.tuwien.ac.at/advisories/TUVSA-0603-003.txt - http://www.osvdb.org/23955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25132 - http://www.osvdb.org/239
txt - http://www.osvdb.org/23955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25132 - http://www.osvdb.org/23954 - http://www.securityfocus.com/archive/1/427186/100/0/threaded
CVE ID: CVE-2006-1205 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) confirmredirect and (2) post_id parameters in (a) delcomment.php, as reachable when mode=delcom from index.php; and the (3) del and (4) message parameters in (b) upload.php, the (5) errormsg parameter in (c) addcat.php, (d) edituser.php, (e) adduser.php, and (f) editcat.php, the (6) trackback_url parameter in (g) add.php, (7) id parameter in (h) deluser.php,
) adduser.php, and (f) editcat.php, the (6) trackback_url parameter in (g) add.php, (7) id parameter in (h) deluser.php, (8) cat_id parameter in (i) delcat.php, and (9) post_id parameter in (j) del.php, as reachable from admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25134 - http://www.osvdb.org/23975 - http://www.securityfocus.com/bid/17048 - http://www.osvdb.org/23987 - http://www.seclab.tuwien.ac.at/advisories/TUVSA-0603-002.txt - http://www.osvdb.org/23989 - http://www.securityfocus.com/archive/1/427182/100/0/threaded - http://www.osvdb.org/23991 - http://www.osvdb.org/23992 - h
tp://www.securityfocus.com/archive/1/427182/100/0/threaded - http://www.osvdb.org/23991 - http://www.osvdb.org/23992 - http://www.osvdb.org/23988 - http://www.osvdb.org/23973 - http://www.osvdb.org/23974 - http://www.osvdb.org/23986
CVE ID: CVE-2006-1206 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service (connection slot exhaustion) via a large number of connection attempts that exceeds the MAX_UNAUTH_CLIENTS defined value of 30. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426999/100/0/threaded - http://www.securityfocus.com/bid/17024 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
/426999/100/0/threaded - http://www.securityfocus.com/bid/17024 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25075 - http://securitytracker.com/id?1015742
CVE ID: CVE-2006-1207 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Upload Center stores password hashes under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for the upload/users/[USERNAME] file. Additional Analyst Notes: - CVE Program Container: References: - http://www.blogcu.com/Liz0ziM/317250/ - http://www.securityfocus.com/archive/1/427215/100/0/threaded - http://biyosecurity.be/bugs/phpuploadcenter2.txt - http://www.osvdb.org/23627 - http://www.scripts-by.net/PHP/File-Manipulation/php-upload-center.html
CVE ID: CVE-2006-1208 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sergey Korostel PHP Upload Center allows remote attackers to execute arbitrary PHP code by uploading a file whose name ends in a .php.li extension, which can be accessed from the upload directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0817 - http://securityreason.com/securityalert/564 - http://www.blogcu.com/Liz0ziM/317250/ - http://secunia.com/advisories/19107 - http://www.securityfocus.com/archive/1/427215/100/0/threaded - http://biyosecurity.be/bugs/php
ia.com/advisories/19107 - http://www.securityfocus.com/archive/1/427215/100/0/threaded - http://biyosecurity.be/bugs/phpuploadcenter2.txt - http://www.scripts-by.net/PHP/File-Manipulation/php-upload-center.html - http://www.osvdb.org/23626
CVE ID: CVE-2006-1209 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for a users/[USERNAME] file. Additional Analyst Notes: - CVE Program Container: References: - http://www.blogcu.com/Liz0ziM/316652/ - http://www.securityfocus.com/archive/1/427216/100/0/threaded - http://biyosecurity.be/bugs/patm.txt - http://www.securityfocus.com/archive/1/437513/100/200/th
/427216/100/0/threaded - http://biyosecurity.be/bugs/patm.txt - http://www.securityfocus.com/archive/1/437513/100/200/threaded - http://securityreason.com/securityalert/565 - http://secunia.com/advisories/17134 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25127
CVE ID: CVE-2006-1210 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface for IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 includes the MySQL database username and password in cleartext in body.phtml, which allows remote attackers to gain privileges by reading the source. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25270 - http://www.securityfocus.com/bid/17032 - http://www.securityfocus.com/archive/1/427155/100/0/threaded
CVE ID: CVE-2006-1211 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns database account, which allows remote attackers to bypass the Netcool/NeuSecure application layer and perform unauthorized database actions. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25270 - http://www.securityfocus.com/archive/1/427155/1
ferences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25270 - http://www.securityfocus.com/archive/1/427155/100/0/threaded