Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0231 State: PUBLISHED Published: 2006-04-25T01:00:00 Last Updated: 2024-08-07T16:25:34.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses the same private DSA key for each installation, which allows remote attackers to conduct man-in-the-middle attacks and decrypt communications. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431725/100/0/threaded - http://www.securityfocus.com/bid/17637 - http://secunia.com/advisories/19734 - http://www.securityfocus.com/archive/1/431734/100/0/threaded - http://archives.neohapsis.com/archives/
dvisories/19734 - http://www.securityfocus.com/archive/1/431734/100/0/threaded - http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0011.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25973 - http://www.symantec.com/avcenter/security/Content/2006.04.21.html - http://www.vupen.com/english/advisories/2006/1464 - http://securitytracker.com/id?1015974
CVE ID: CVE-2006-0232 State: PUBLISHED Published: 2006-04-25T01:00:00 Last Updated: 2024-08-07T16:25:34.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17637 - http://www.securityfocus.com/archive/1/431728/100/0/threaded - http://secunia.com/advisories/19734 - http://www.securityfocus.com/archive/1/431734/100/0/threaded - https://e
hreaded - http://secunia.com/advisories/19734 - http://www.securityfocus.com/archive/1/431734/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25974 - http://securityreason.com/securityalert/758 - http://securityreason.com/securityalert/759 - http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0012.html - http://www.symantec.com/avcenter/security/Content/2006.04.21.html - http://www.vupen.com/english/advisories/2006/1464 - http://securitytracker.com/id?1015974
CVE ID: CVE-2006-0233 State: PUBLISHED Published: 2006-01-18T00:00:00 Last Updated: 2024-08-07T16:25:34.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a [url] BBcode tag. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24140 - http://evuln.com/vulns/36/summary.html - http://www.securityfocus.com/bid/16272 - http://www.securityfocus.com/archive/1/422145/100/0/threaded
CVE ID: CVE-2006-0234 State: PUBLISHED Published: 2006-01-18T00:00:00 Last Updated: 2024-08-07T16:25:34.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22512 - http://securitytracker.com/id?1015496 - http://www.securityfocus.com/bid/16270 - http://www.vupen.com/english/advisories/2006/0239 - http://evuln.com/vulns/35/summary.html - http://secunia.com/advisories/18442 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24132 -
ns/35/summary.html - http://secunia.com/advisories/18442 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24132 - http://www.securityfocus.com/archive/1/422141/100/0/threaded
CVE ID: CVE-2006-0235 State: PUBLISHED Published: 2006-01-18T01:00:00 Last Updated: 2024-08-07T16:25:34.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in WhiteAlbum 2.5 allows remote attackers to execute arbitrary SQL commands via the dir parameter to pictures.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0241 - http://www.osvdb.org/22520 - http://www.securityfocus.com/bid/16247 - http://secunia.com/advisories/18460 - http://www.biyosecurity.be/bugs/whitealbum.txt - http://www.securityfocus.com/archive/1/422105/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities
xt - http://www.securityfocus.com/archive/1/422105/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24271
CVE ID: CVE-2006-0236 State: PUBLISHED Published: 2006-01-18T01:00:00 Last Updated: 2024-08-07T16:25:34.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: GUI display truncation vulnerability in Mozilla Thunderbird 1.0.2, 1.0.6, and 1.0.7 allows user-assisted attackers to execute arbitrary code via an attachment with a filename containing a large number of spaces ending with a dangerous extension that is not displayed by Thunderbird, along with an inconsistent Content-Type header, which could be used to trick a user into downloading dangerous content by dragging or saving the attachment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.co
g or saving the attachment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16271 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24164 - http://secunia.com/secunia_research/2005-22/advisory - http://www.securityfocus.com/archive/1/422148/100/0/threaded - https://bugzilla.mozilla.org/show_bug.cgi?id=300246 - http://www.vupen.com/english/advisories/2006/0230 - http://secunia.com/advisories/15907
CVE ID: CVE-2006-0237 State: PUBLISHED Published: 2006-01-18T01:00:00 Last Updated: 2024-08-07T16:25:34.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in GTP iCommerce allows remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) subcat parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24150 - http://www.securityfocus.com/bid/16255 - http://www.vupen.com/english/adviso
xforce.ibmcloud.com/vulnerabilities/24150 - http://www.securityfocus.com/bid/16255 - http://www.vupen.com/english/advisories/2006/0214
CVE ID: CVE-2006-0238 State: PUBLISHED Published: 2006-01-18T01:00:00 Last Updated: 2024-08-07T16:25:34.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to execute arbitrary SQL commands via the author parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.lesterchan.net/blogs/archives/2006/01/18/wp-stats-sql-injection-vulnerability - http://osvdb.org/ref/22/22450-wpstats.txt - http://www.vupen.com/english/advisories/2006/0192 - http://www.osvdb.org/22450 - http://www.lesterchan.net/blogs/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/24163 - http
w.osvdb.org/22450 - http://www.lesterchan.net/blogs/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/24163 - http://secunia.com/advisories/18471 - http://www.securityfocus.com/bid/16241
CVE ID: CVE-2006-0239 State: PUBLISHED Published: 2006-01-18T01:00:00 Last Updated: 2024-08-07T16:25:34.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via (1) a comment to comments.asp and (2) possibly certain other fields in unspecified scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0194 - http://www.hackerscenter.com/archive/view.asp?id=21926 - http://www.securityfocus.com/bid/16243 - http://www.osvdb.org/22448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24154
w.securityfocus.com/bid/16243 - http://www.osvdb.org/22448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24154 - http://www.securityfocus.com/archive/1/422102/100/0/threaded - http://secunia.com/advisories/18488
CVE ID: CVE-2006-0240 State: PUBLISHED Published: 2006-01-18T01:00:00 Last Updated: 2024-08-07T16:25:34.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly certain other parameters in unspecified scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0194 - http://www.hackerscenter.com/archive/view.asp?id=21926 - http://www.securityfocus.com/bid/16243 - http://www.osvdb.org/22447 - http://www.securityfocus.com/archive/1/422102/100/0/threa
www.securityfocus.com/bid/16243 - http://www.osvdb.org/22447 - http://www.securityfocus.com/archive/1/422102/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24155 - http://secunia.com/advisories/18488
CVE ID: CVE-2006-0241 State: PUBLISHED Published: 2006-01-18T01:00:00 Last Updated: 2024-08-07T16:25:34.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in WBNews 1.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the Name field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/422133/100/0/threaded - http://www.securityfocus.com/bid/16277 - http://secunia.com/advisories/18499 - http://www.vupen.com/english/advisories/2006/0237
CVE ID: CVE-2006-0242 State: PUBLISHED Published: 2006-01-18T01:00:00 Last Updated: 2024-08-07T16:25:34.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in index.php in PHP Fusebox 4.0.6 allows remote attackers to inject arbitrary web script or HTML via the fuseaction parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16274 - http://securityreason.com/securityalert/355 - http://www.securityfocus.com/archive/1/422124/100/0/threaded
CVE ID: CVE-2006-0243 State: PUBLISHED Published: 2006-01-18T02:00:00 Last Updated: 2024-08-07T16:25:34.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SMBCMS 2.1 allows remote attackers to inject arbitrary web script or HTML via the text parameter, which is used by the "Search Site" field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16281 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24187 - http://www.vupen.com/english/advisories/2006/0229 - http://www.osv
/exchange.xforce.ibmcloud.com/vulnerabilities/24187 - http://www.vupen.com/english/advisories/2006/0229 - http://www.osvdb.org/22494 - http://secunia.com/advisories/18454
CVE ID: CVE-2006-0244 State: PUBLISHED Published: 2006-01-18T02:00:00 Last Updated: 2024-08-07T16:25:34.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in workspaces.php in phpXplorer 0.9.33 allows remote attackers to include arbitrary files via a .. (dot dot) and trailing null byte (%00) in the sShare parameter. NOTE: a followup post claims that this is not a vulnerability since the functionality of phpXplorer supports the upload of PHP files, which would not cross privilege boundaries since the PHP functionality would support read access outside the web root Additional Analyst Notes: - CVE Program Container: References: - http://www.securit
ort read access outside the web root Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/422158/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/39982 - http://www.securityfocus.com/bid/16263 - http://www.arrelnet.com/advisories/adv20060116.html - http://www.vupen.com/english/advisories/2006/0232 - http://secunia.com/advisories/18518 - http://securityreason.com/securityalert/353 - http://www.securityfocus.com/archive/1/421997/100/0/threaded
CVE ID: CVE-2006-0245 State: PUBLISHED Published: 2006-01-18T02:00:00 Last Updated: 2024-08-07T16:25:34.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.7-pl1 allow remote attackers to inject arbitrary web script or HTML via the (3) redir, (4) productId, (5) docId, (6) act, and (7) catId parameters in index.php; and the (8) username field in a login action in index.php. NOTE: the cart.php/redir and index.php/searchStr vectors are already covered by CVE-2005-3152. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0227 - https://exchange.xforce.ibmcloud
VE Program Container: References: - http://www.vupen.com/english/advisories/2006/0227 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24177 - http://bugs.cubecart.com/?do=details&id=459 - http://www.osvdb.org/22471 - http://secunia.com/advisories/18519 - http://www.securityfocus.com/bid/16259 - http://lostmon.blogspot.com/2006/01/cubecart-307-pl1-indexphp-multiple.html
CVE ID: CVE-2006-0246 State: PUBLISHED Published: 2006-01-18T02:00:00 Last Updated: 2024-08-07T16:25:34.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in down.pl in Widexl Download Tracker 1.06 allows remote attackers to inject arbitrary web script or HTML via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24161 - http://www.osvdb.org/22462 - http://www.vupen.com/english/advisories/2006/0213 - http://osvdb.org/ref/22/22462-widexl.txt - http://secunia.com/advisories/18472 - http://www.securityfocus.com/bid/16265
CVE ID: CVE-2006-0247 State: PUBLISHED Published: 2006-01-18T02:00:00 Last Updated: 2024-08-07T16:25:34.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in anyboard.cgi in Netbula Anyboard 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tK parameter in a find command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18469 - http://www.osvdb.org/22461 - http://osvdb.org/ref/22/22461-anyboard.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24167 - http://www.vupen.com/english/advisories/2006/0188 - http://www.securityfocus.com/bid/16264
CVE ID: CVE-2006-0248 State: PUBLISHED Published: 2006-01-18T02:00:00 Last Updated: 2024-08-07T16:25:34.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Virata-EmWeb web server 6_1_0, as used in (1) Intracom JetSpeed 500 and 520 and (2) Allied Data Technologies CopperJet 811 RouterPlus, allows remote attackers to access privileged information, such as user lists and configuration settings, via direct HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://blog.globalnetworks.gr/?p=4 - http://www.vupen.com/english/advisories/2006/0218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24304 - http://secunia.com/advisories/18483
CVE ID: CVE-2006-0249 State: PUBLISHED Published: 2006-01-18T02:00:00 Last Updated: 2024-08-07T16:25:34.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewcat.php in BitDamaged geoBlog MOD_1.0 allows remote attackers to execute arbitrary SQL commands, then steal credentials and upload files, via the cat parameter ($tmpCategory variable). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16249 - http://secunia.com/advisories/18504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24146 - http://evuln.com/vulns/33/summary.html - http://www.osvdb.org/22463 - http://www.vupen.com/english/advisori
ties/24146 - http://evuln.com/vulns/33/summary.html - http://www.osvdb.org/22463 - http://www.vupen.com/english/advisories/2006/0191 - http://securitytracker.com/id?1015493
CVE ID: CVE-2006-0250 State: PUBLISHED Published: 2006-01-18T02:00:00 Last Updated: 2024-08-07T16:25:34.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the snmp_input function in snmptrapd in CMU SNMP utilities (cmu-snmp) allows remote attackers to execute arbitrary code by sending crafted SNMP messages to UDP port 162. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16267 - http://www.osvdb.org/22493 - http://www.digitalarmaments.com/2006040164883273.html - http://secunia.com/advisories/18525 - http://www.vupen.com/english/advisories/2006/0234 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
dvisories/18525 - http://www.vupen.com/english/advisories/2006/0234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24178 - http://www.securityfocus.com/archive/1/422086/100/0/threaded
CVE ID: CVE-2006-0251 State: PUBLISHED Published: 2006-01-18T02:00:00 Last Updated: 2024-08-07T16:25:34.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web script or HTML via the (1) _duration, (2) file, and (3) cmd parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18468 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24165 - http://www.osvdb.org/22439 - http://www.vupen.com/english/advisories/2006/0189 - http://osvdb.org/ref/22/22439-faqomatic.txt - http://www.securityfocus.com/bid/16251
CVE ID: CVE-2006-0252 State: PUBLISHED Published: 2006-01-18T02:00:00 Last Updated: 2024-08-07T16:25:34.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Benders Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by the (1) year, (2) month, and (3) day parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18462 - http://www.securityfocus.com/archive/1/422052/100/0/threaded - http://www.osvdb.org/22449 - http://securitytracker.com/id?1015491 - http://www.vupen.com/english/advisories/2006/0190 - http://www.securityfocus.com/bid/16242 - h
ytracker.com/id?1015491 - http://www.vupen.com/english/advisories/2006/0190 - http://www.securityfocus.com/bid/16242 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24120 - http://evuln.com/vulns/30/summary.html
CVE ID: CVE-2006-0253 State: PUBLISHED Published: 2006-01-18T02:00:00 Last Updated: 2024-08-07T16:25:34.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Bluetooth OBEX Object Push service in "Blue Neighbors.EXE" in AmbiCom Blue Neighbors 2.50 Build 2500 and earlier allows remote attackers to execute arbitrary code via a long file name, as demonstrated via a long RFILE argument to ussp-push. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16258 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24179 - http://securityreason.com/securityalert/366 - http://www.vupen.com/english/advisories/2006/0219 - htt
rabilities/24179 - http://securityreason.com/securityalert/366 - http://www.vupen.com/english/advisories/2006/0219 - http://www.securityfocus.com/archive/1/422481/100/0/threaded - http://www.digitalmunition.com/DMA%5B2006-0115a%5D.txt - http://secunia.com/advisories/18466
CVE ID: CVE-2006-0254 State: PUBLISHED Published: 2006-01-18T02:00:00 Last Updated: 2024-08-07T16:25:34.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2008-0630.html - http://secunia.com/advisories/31493 - http://www.oliverkarow.de/research/geronimo_css.txt - https://issues.apache.org/jira/secure/R
nia.com/advisories/31493 - http://www.oliverkarow.de/research/geronimo_css.txt - https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12310181&styleName=Html&projectId=10220&Create=Create - http://www.securityfocus.com/bid/16260 - http://www.vupen.com/english/advisories/2006/0217 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24159 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24158 - http://www.securityfocus.com/archive/1/421996/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://issues.apache.org/jira/browse/GERONIMO-1474 - http://secunia.com/advisories/18485
CVE ID: CVE-2006-0255 State: PUBLISHED Published: 2006-01-18T02:00:00 Last Updated: 2024-08-07T16:25:34.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in Check Point VPN-1 SecureClient might allow local users to gain privileges via a malicious "program.exe" file in the C: folder, which is run when SecureClient attempts to launch the Sr_GUI.exe program. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0258 - http://secdev.zoller.lu/research/checkpoint.txt - http://www.securityfocus.com/bid/16290 - http://www.securityfocus.com/archive/1/422263/100/0/threaded
CVE ID: CVE-2006-0256 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Advanced Queuing component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.6, 10.1.0.3 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB01. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - htt
ert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608
CVE ID: CVE-2006-0257 State: PUBLISHED Published: 2006-01-18T11:00:00 Last Updated: 2024-08-07T16:25:34.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Change Data Capture component of Oracle Database server 9.2.0.7, 10.1.0.5, and 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB02. NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the CDC_ALLOCATE_LOCK function of the DBMS_CDC_UTILITY package. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmclo
BMS_CDC_UTILITY package. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://www.osvdb.org/22540 - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608