Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1490 State: PUBLISHED Published: 2006-03-29T21:00:00 Last Updated: 2024-08-07T17:12:22.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary data sent to a script that processes user input in the html_entity_decode function and sends the encoded results back to the client, aka a "binary safety" issue. NOTE: this issue has been referred to as a "memory leak," but it is an information leak that discloses memory contents. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:063 - https://oval.cisecuri
Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:063 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11084 - http://www.vupen.com/english/advisories/2006/4750 - http://www.securityfocus.com/archive/1/429164/100/0/threaded - http://secunia.com/advisories/19499 - http://www.securityfocus.com/bid/17296 - http://secunia.com/advisories/20210 - http://docs.info.apple.com/article.html?artnum=304829 - http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/html.c?r1=1.112&r2=1.113 - http://rhn.redhat.com/errata/RHSA-2006-0276.html - http://security.gentoo.org/glsa/glsa-200605-08.xml - http://secunia.com/advisories/19570
om/errata/RHSA-2006-0276.html - http://security.gentoo.org/glsa/glsa-200605-08.xml - http://secunia.com/advisories/19570 - http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/html.c?view=log - https://exchange.xforce.ibmcloud.com/vulnerabilities/25508 - http://secunia.com/advisories/19383 - http://www.ubuntu.com/usn/usn-320-1 - http://secunia.com/advisories/23155 - http://secunia.com/advisories/19979 - http://secunia.com/advisories/20951 - http://secunia.com/advisories/21125 - http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm - http://www.securityfocus.com/archive/1/429162/100/0/threaded - http://secunia.com/advisories/19832 - ftp://patches.sgi.com/support/free/security/advisories
e/1/429162/100/0/threaded - http://secunia.com/advisories/19832 - ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc - http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - http://www.us-cert.gov/cas/techalerts/TA06-333A.html - http://bugs.gentoo.org/show_bug.cgi?id=127939 - http://secunia.com/advisories/20052 - http://www.trustix.org/errata/2006/0020 - http://www.vupen.com/english/advisories/2006/2685 - http://www.novell.com/linux/security/advisories/05-05-2006.html - http://www.vupen.com/english/advisories/2006/1149
CVE ID: CVE-2006-1491 State: PUBLISHED Published: 2006-03-29T22:00:00 Last Updated: 2024-08-07T17:12:22.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1 before 3.1.1 allows remote attackers to execute arbitrary code via the help viewer. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200604-02.xml - http://www.debian.org/security/2006/dsa-1034 - http://www.securityfocus.com/bid/17292 - http://www.attrition.org/pipermail/vim/2006-March/000671.html - http://secunia.com/advisories/19528 - https://exchange.xforce.ibmcloud.com/v
.org/pipermail/vim/2006-March/000671.html - http://secunia.com/advisories/19528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25516 - http://secunia.com/advisories/19485 - http://cvs.horde.org/diff.php?f=horde%2Fservices%2Fhelp%2Findex.php&r1=2.85&r2=2.86 - http://secunia.com/advisories/19692 - http://www.novell.com/linux/security/advisories/2006_07_sr.html - http://www.vupen.com/english/advisories/2006/1154 - http://secunia.com/advisories/19619 - http://www.debian.org/security/2006/dsa-1033 - http://securitytracker.com/id?1015841 - http://secunia.com/advisories/19504 - http://lists.horde.org/archives/announce/2006/000272.html - http://lists.horde.org/archives/announce/2006/000271.h
504 - http://lists.horde.org/archives/announce/2006/000272.html - http://lists.horde.org/archives/announce/2006/000271.html
CVE ID: CVE-2006-1492 State: PUBLISHED Published: 2006-03-29T22:00:00 Last Updated: 2024-08-07T17:12:22.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in dir.php in Explorer XP allows remote attackers to read arbitrary files via the chemin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1806.html - http://www.silitix.com/explorerxp.php - http://www.zataz.com/news/10871/Probleme-de-securite-decouvert-dans-le-logiciel-ExploreXP.html - http://www.vupen.com/english/advisories/2006/1165 - http://www.osvdb.org/24259 - http://secunia.com/advisories/19460 - htt
tp://www.vupen.com/english/advisories/2006/1165 - http://www.osvdb.org/24259 - http://secunia.com/advisories/19460 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25523 - http://www.securityfocus.com/bid/17303 - http://securitytracker.com/id?1015840
CVE ID: CVE-2006-1493 State: PUBLISHED Published: 2006-03-29T22:00:00 Last Updated: 2024-08-07T17:12:22.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dir.php in Explorer XP allows remote attackers to inject arbitrary web script or HTML via the chemin parameter. NOTE: it is possible that this issue is resultant from CVE-2006-1492. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1806.html - http://www.silitix.com/explorerxp.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/25524 - http://www.zataz.com/news/10871/Probleme-de-securite-decouvert-dan
/exchange.xforce.ibmcloud.com/vulnerabilities/25524 - http://www.zataz.com/news/10871/Probleme-de-securite-decouvert-dans-le-logiciel-ExploreXP.html - http://www.vupen.com/english/advisories/2006/1165 - http://secunia.com/advisories/19460 - http://www.osvdb.org/24260 - http://www.securityfocus.com/bid/17303 - http://securitytracker.com/id?1015840
CVE ID: CVE-2006-1494 State: PUBLISHED Published: 2006-04-10T19:00:00 Last Updated: 2024-08-07T17:12:22.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictions allows remote attackers to create files in arbitrary directories via the tempnam function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21723 - https://issues.rpath.com/browse/RPL-683 - http://secunia.com/advisories/19775 - http://secunia.com/advisories/21252 - http://secunia.com/advisories/21202 - http://securityreason.com/securityalert/677 - https://exchan
om/advisories/21252 - http://secunia.com/advisories/21202 - http://securityreason.com/securityalert/677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25705 - http://www.vupen.com/english/advisories/2006/1290 - http://www.redhat.com/support/errata/RHSA-2006-0568.html - http://secunia.com/advisories/21135 - http://www.ubuntu.com/usn/usn-320-1 - http://www.securityfocus.com/archive/1/447866/100/0/threaded - http://secunia.com/advisories/19979 - http://rhn.redhat.com/errata/RHSA-2006-0549.html - http://secunia.com/advisories/22225 - http://secunia.com/advisories/21125 - http://secunia.com/advisories/19599 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:074 - http://securit
- http://secunia.com/advisories/19599 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:074 - http://securityreason.com/achievement_securityalert/36 - http://secunia.com/advisories/21031 - http://securitytracker.com/id?1015881 - http://www.redhat.com/support/errata/RHSA-2006-0567.html - ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U - http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10196 - http://www.securityfocus.com/bid/17439 - http://www.novell.com/linux/security/advisories/05-05-2006.html
CVE ID: CVE-2006-1495 State: PUBLISHED Published: 2006-03-30T00:00:00 Last Updated: 2024-08-07T17:12:22.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3, and (2) NetOffice 2.5.3-pl1 and 2.6.0b2 allows remote attackers to execute arbitrary SQL commands via the loginForm parameter in the "forgotten password" option. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19449 - http://www.vupen.com/english/advisories/2006/1141 - http://www.securityfocus.com/bid/17286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25505 - https://www.exploit-db.
//www.securityfocus.com/bid/17286 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25505 - https://www.exploit-db.com/exploits/1617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25503 - http://downloads.securityfocus.com/vulnerabilities/exploits/PHPCollab_NetOffice_SQLINJ.php - http://secunia.com/advisories/19452 - http://www.vupen.com/english/advisories/2006/1142 - http://www.osvdb.org/24230 - http://security.gentoo.org/glsa/glsa-200812-20.xml - http://www.osvdb.org/24226 - http://www.securityfocus.com/bid/17283 - http://secunia.com/advisories/33258
CVE ID: CVE-2006-1496 State: PUBLISHED Published: 2006-03-30T00:00:00 Last Updated: 2024-08-07T17:12:22.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1) a remote URL in the page parameter, which is processed by an fopen call, or (2) HTML or script in the page parameter, which is returned to the client in an error message for the failed fopen call. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25483 - http://www.attrition.org/pipermail/vim/2006-March/000651.h
https://exchange.xforce.ibmcloud.com/vulnerabilities/25483 - http://www.attrition.org/pipermail/vim/2006-March/000651.html - http://www.securityfocus.com/archive/1/428737 - http://www.attrition.org/pipermail/vim/2006-March/000650.html - http://secunia.com/advisories/19403 - http://www.securityfocus.com/bid/17226
CVE ID: CVE-2006-1497 State: PUBLISHED Published: 2006-03-30T00:00:00 Last Updated: 2024-08-07T17:12:22.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read arbitrary files via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/625 - http://www.vupen.com/english/advisories/2006/1114 - http://www.securityfocus.com/bid/17227 - http://www.securityfocus.com/archive/1/428737 - http://www.attrition.org/pipermail/vim/2006-March/000650.html - http://www.attrition.org/pipermail/vim/2006-March/000652.html - http://secunia.co
pipermail/vim/2006-March/000650.html - http://www.attrition.org/pipermail/vim/2006-March/000652.html - http://secunia.com/advisories/19403 - http://www.securityfocus.com/bid/17226
CVE ID: CVE-2006-1498 State: PUBLISHED Published: 2006-03-30T00:00:00 Last Updated: 2024-08-07T17:12:22.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MediaWiki before 1.5.8 and 1.4.15 allows remote attackers to inject arbitrary web script or HTML via crafted encoded links. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1194 - http://www.gentoo.org/security/en/glsa/glsa-200604-01.xml - http://mail.wikipedia.org/pipermail/mediawiki-announce/2006-March/000040.html - http://www.mediawiki.org/wiki/MediaWiki - http://secunia.com/advisories/19517 - http://www.novell.com/linux
00040.html - http://www.mediawiki.org/wiki/MediaWiki - http://secunia.com/advisories/19517 - http://www.novell.com/linux/security/advisories/2006_07_sr.html - http://www.securityfocus.com/bid/17269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25588 - http://secunia.com/advisories/19508 - http://secunia.com/advisories/19504
CVE ID: CVE-2006-1499 State: PUBLISHED Published: 2006-03-30T00:00:00 Last Updated: 2024-08-07T17:12:22.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in vCounter.php in vCounter 1.0 allows remote attackers to execute arbitrary SQL commands via the URI (_SERVER[REQUEST_URI] variable). Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24234 - http://secunia.com/advisories/19422 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25500 - http://evuln.com/vulns/108/summary.html - http://www.vupen.com/english/advisories/2006/1147 - http://www.securityfocus.com/bid/17302 - http://www.securityfocus.com/archive/1/43
en.com/english/advisories/2006/1147 - http://www.securityfocus.com/bid/17302 - http://www.securityfocus.com/archive/1/430353/100/0/threaded
CVE ID: CVE-2006-1500 State: PUBLISHED Published: 2006-03-30T00:00:00 Last Updated: 2024-08-07T17:12:22.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Tilde CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19447 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25510 - http://osvdb.org/ref/24/24233-tilde.txt - http://www.osvdb.org/24233 - http://www.vupen.com/english/advisories/2006/1145 - http://www.securityfocus.com/bid/17299
CVE ID: CVE-2006-1501 State: PUBLISHED Published: 2006-03-30T00:00:00 Last Updated: 2024-08-07T17:12:22.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in OneOrZero 1.6.3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in the kans action. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/ref/24/24228-oneorzero.txt - http://www.osvdb.org/24228 - http://www.securityfocus.com/bid/17298 - http://www.vupen.com/english/advisories/2006/1146 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25511 - http://secunia.com/advisories/19446
CVE ID: CVE-2006-1502 State: PUBLISHED Published: 2006-03-30T00:00:00 Last Updated: 2024-08-07T17:12:22.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in MPlayer 1.0pre7try2 allow remote attackers to cause a denial of service and trigger heap-based buffer overflows via (1) a certain ASF file handled by asfheader.c that causes the asf_descrambling function to be passed a negative integer after the conversion from a char to an int or (2) an AVI file with a crafted wLongsPerEntry or nEntriesInUse value in the indx chunk, which is handled in aviheader.c. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.c
dled in aviheader.c. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25513 - http://secunia.com/advisories/19418 - http://www.xfocus.org/advisories/200603/11.html - http://securityreason.com/securityalert/647 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044615.html - http://www.gentoo.org/security/en/glsa/glsa-200605-01.xml - http://www.osvdb.org/24247 - http://www.securityfocus.com/archive/1/429251/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25514 - http://secunia.com/advisories/19565 - http://secunia.com/advisories/19919 - http://securityreason.com/securityalert/532 - http://s
unia.com/advisories/19565 - http://secunia.com/advisories/19919 - http://securityreason.com/securityalert/532 - http://securitytracker.com/id?1015842 - http://www.securityfocus.com/bid/17295 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:068 - http://www.osvdb.org/24246 - http://www.vupen.com/english/advisories/2006/1156
CVE ID: CVE-2006-1503 State: PUBLISHED Published: 2006-03-30T01:00:00 Last Updated: 2024-08-07T17:12:22.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions_install.php in Virtual War (VWar) 1.5.0 R11 and earlier allows remote attackers to include and execute arbitrary PHP code via a URL in the vwar_root parameter. NOTE: this is a different vulnerability than CVE-2006-1636. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25497 - http://www.securityfocus.com/bid/17290 - http://www.securityfocus.com/archive/1/429090/100/0/threaded - http://secunia.com/a
://www.securityfocus.com/bid/17290 - http://www.securityfocus.com/archive/1/429090/100/0/threaded - http://secunia.com/advisories/19438 - http://www.vupen.com/english/advisories/2006/1144 - http://www.osvdb.org/24239 - http://attrition.org/pipermail/vim/2006-April/000679.html
CVE ID: CVE-2006-1504 State: PUBLISHED Published: 2006-03-30T01:00:00 Last Updated: 2024-08-07T17:12:22.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0 (aka Arab Dynamic Portal or ADP) stable allow remote attackers to inject arbitrary web script or HTML via the title parameter in (1) online.php and (2) download.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17285 - http://securityreason.com/securityalert/673 - http://www.vupen.com/english/advisories/2006/1150 - http://www.osvdb.org/24220 - http://secunia.com/advisories/19445 - http://www.osvdb.org/242
glish/advisories/2006/1150 - http://www.osvdb.org/24220 - http://secunia.com/advisories/19445 - http://www.osvdb.org/24221 - http://www.securityfocus.com/archive/1/429109/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25515
CVE ID: CVE-2006-1505 State: PUBLISHED Published: 2006-03-30T01:00:00 Last Updated: 2024-08-07T17:12:22.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: base_maintenance.php in Basic Analysis and Security Engine (BASE) before 1.2.4 (melissa), when running in standalone mode, allows remote attackers to bypass authentication, possibly by setting the standalone parameter to "yes". Additional Analyst Notes: - CVE Program Container: References: - http://cvs.sourceforge.net/viewcvs.py/secureideas/base-php4/docs/CHANGELOG?rev=1.233&view=markup - http://www.osvdb.org/24101 - http://secunia.com/advisories/19510 - http://www.securityfocus.com/bid/17354 - http://www.vupen.com/english/adv
/24101 - http://secunia.com/advisories/19510 - http://www.securityfocus.com/bid/17354 - http://www.vupen.com/english/advisories/2006/1192
CVE ID: CVE-2006-1506 State: PUBLISHED Published: 2006-03-30T01:00:00 Last Updated: 2024-08-07T17:12:22.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in rsh in Sun Microsystems Sun Grid Engine 5.3 before 20060327 and N1 Grid Engine 6.0 before 20060327 allows local users to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102268-1 - http://securitytracker.com/id?1015835 - http://www.vupen.com/english/advisories/2006/1155
CVE ID: CVE-2006-1507 State: PUBLISHED Published: 2006-03-30T01:00:00 Last Updated: 2024-08-07T17:12:22.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows remote attackers to inject arbitrary web script or HTML via the error parameter to include.php, possibly due to a problem in login/login.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25594 - http://www.securityfocus.com/archive/1/429249/100/0/threaded - http://www.securityfocus.com/bid/17291
CVE ID: CVE-2006-1508 State: PUBLISHED Published: 2006-03-30T01:00:00 Last Updated: 2024-08-07T17:12:22.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MH Software Connect Daily Web Calendar Software 3.2.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) calendar_id, (2) style_sheet, and (3) start parameters in (a) ViewDay.html; the (4) txtSearch and (5) opgSearch parameters in (b) ViewSearch.html; the (6) calendar_id and (7) approved parameters in (c) ViewYear.html; the (8) item_type_id parameter in (d) ViewCal.html; and the (9) week parameter in (e) ViewWeek.html. Additional Analyst
the (8) item_type_id parameter in (d) ViewCal.html; and the (9) week parameter in (e) ViewWeek.html. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/03/connect-daily-multiple-xss-vuln.html - http://www.osvdb.org/24184 - http://www.osvdb.org/24185 - http://secunia.com/advisories/19434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25474 - http://www.vupen.com/english/advisories/2006/1125 - http://www.osvdb.org/24183 - http://www.osvdb.org/24181 - http://www.osvdb.org/24182 - http://www.securityfocus.com/bid/17287
CVE ID: CVE-2006-1509 State: PUBLISHED Published: 2006-03-30T01:00:00 Last Updated: 2024-08-07T17:12:22.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: /sbin/passwd in HP-UX B.11.00, B.11.11, and B.11.23 before 20060326 "does not recover gracefully from some error conditions," which allows local users to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1208 - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00619550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25596 - http://www.securityfocus.com/bid/17280 - https://oval.cisecurity.org/repository/search/definition/oval%3A
lities/25596 - http://www.securityfocus.com/bid/17280 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1690 - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00619550 - http://secunia.com/advisories/19490 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1660 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1412
CVE ID: CVE-2006-1510 State: PUBLISHED Published: 2006-03-30T01:00:00 Last Updated: 2024-08-07T17:12:22.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in calloc.c in the Microsoft Windows XP SP2 ntdll.dll system library, when used by the ILDASM disassembler in the Microsoft .NET 1.0 and 1.1 SDK, might allow user-assisted attackers to execute arbitrary code via a crafted .dll file with a large static method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17243 - http://secunia.com/advisories/19406 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044482.html - http://owasp.net/forums/257/showpost
19406 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044482.html - http://owasp.net/forums/257/showpost.aspx - http://www.vupen.com/english/advisories/2006/1113 - http://owasp.net/forums/234/showpost.aspx - https://exchange.xforce.ibmcloud.com/vulnerabilities/25439
CVE ID: CVE-2006-1511 State: PUBLISHED Published: 2006-03-30T01:00:00 Last Updated: 2024-08-07T17:12:22.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ILASM assembler in the Microsoft .NET 1.0 and 1.1 Framework might allow user-assisted attackers to execute arbitrary code via a .il file that calls a function with a long name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17243 - http://secunia.com/advisories/19406 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044482.html - http://owasp.net/forums/257/showpost.aspx - http://www.vupen.com/english/advisories/2006/1113 - https://exchange