Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
nerabilities/25876 - http://www.securityfocus.com/bid/17528 - http://www.securityfocus.com/archive/1/431005/100/0/threaded - http://securityreason.com/securityalert/706
CVE ID: CVE-2006-1806 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Musicbox 2.3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25835 - http://www.securityfocus.com/archive/1/441000/100/0/threaded - http://pridels0.blogspot.com/2006/04/musicbox-vuln.html - http://www.securityfocus.com/bid/17545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
/04/musicbox-vuln.html - http://www.securityfocus.com/bid/17545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27925 - http://www.vupen.com/english/advisories/2006/1373 - http://secunia.com/advisories/19672
CVE ID: CVE-2006-1807 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:29.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Musicbox 2.3.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) start parameter in a search action or (2) type parameter in a top action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25836 - http://www.securityfocus.com/archive/1/441000/100/0/threaded - http://pridels0.blogspot.com/2006/04/musicbox-vuln.html - http://www.securityfocus.com/bid/17545 - https://exchange.xf
- http://pridels0.blogspot.com/2006/04/musicbox-vuln.html - http://www.securityfocus.com/bid/17545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27926 - http://www.vupen.com/english/advisories/2006/1373 - http://secunia.com/advisories/19672
CVE ID: CVE-2006-1808 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Lifetype 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the show parameter in a Template operation. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015941 - http://www.vupen.com/english/advisories/2006/1367 - http://www.securityfocus.com/archive/1/431008/100/0/threaded - http://secunia.com/advisories/19646 - http://www.securityfocus.com/bid/17529 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
cunia.com/advisories/19646 - http://www.securityfocus.com/bid/17529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25899
CVE ID: CVE-2006-1809 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Lifetype 1.0.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25903 - http://securityreason.com/securityalert/711 - http://www.securityfocus.com/archive/1/431008/100/0/threaded
CVE ID: CVE-2006-1810 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:29.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to inject arbitrary web script or HTML via the (1) ICQ, (2) AIM, (3) MSN, (4) Google Talk, (5) Website Name, (6) Website Address, (7) Email Address, (8) Location, (9) Signature, and (10) Sub-Titles fields in the user profile. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17539 - http://www.securityfocus.com/archive/1/431121/100/0/threaded
CVE ID: CVE-2006-1811 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in FlexBB 0.5.5 BETA allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) forumid, or (3) threadid parameter to index.php; the (4) ICQ, (5) AIM, (6) MSN, (7) Google Talk, (8) Website Name, (9) Website Address, (10) Email Address, (11) Location, (12) Signature, and (13) Sub-Titles fields in the user profile; or (14) flexbb_password field in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431121/100/0/
e. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431121/100/0/threaded - http://www.securityfocus.com/bid/17574
CVE ID: CVE-2006-1812 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpWebFTP 3.2 and earlier stores script.js under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25921 - http://secunia.com/advisories/19706 - http://www.securityfocus.com/archive/1/431115/100/0/threaded
CVE ID: CVE-2006-1813 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:29.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in phpWebFTP 3.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17557 - http://www.vupen.com/english/advisories/2006/1388 - http://secunia.com/advisories/19706 - http://securityreason.com/securityalert/723 - http://www.securityfocus.com/archive/1/431115/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/2592
http://www.securityfocus.com/archive/1/431115/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25920
CVE ID: CVE-2006-1814 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetBSD 1.6, 2.0, 2.1 and 3.0 allows local users to cause a denial of service (memory exhaustion) by using the sysctl system call to lock a large buffer into physical memory. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015909 - http://www.osvdb.org/24579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25764 - http://www.securityfocus.com/bid/17498 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-013.txt.asc - http://secunia.com/advisories/19616
CVE ID: CVE-2006-1815 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) newuser_realname and (2) newuser_icq parameters, a different vector than CVE-2006-1768. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19635 - http://www.vupen.com/english/advisories/2006
CVE Program Container: References: - http://secunia.com/advisories/19635 - http://www.vupen.com/english/advisories/2006/1329 - http://www.osvdb.org/24556 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25751 - http://securityreason.com/securityalert/693
CVE ID: CVE-2006-1816 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in VBulletin 3.5.1, 3.5.2, and 3.5.4 allows remote attackers to execute arbitrary code via a URL in the systempath parameter to (1) ImpExModule.php, (2) ImpExController.php, and (3) ImpExDisplay.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/467666/100/0/threaded - http://www.securityfocus.com/archive/1/430881/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34095 - http://secunia.com/advisories/19352 - ht
1/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/34095 - http://secunia.com/advisories/19352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25789 - http://www.osvdb.org/24692 - http://www.osvdb.org/24691 - http://www.osvdb.org/24690
CVE ID: CVE-2006-1817 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in authcheck.php in warforge.NEWS 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the (1) authusername and possibly the (2) authpassword cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/432104/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25900 - http://www.securityfocus.com/bid/17705 - http://www.securityfocus.com/bid/17520 - http://www.vupen.com/english/advisori
http://www.securityfocus.com/bid/17705 - http://www.securityfocus.com/bid/17520 - http://www.vupen.com/english/advisories/2006/1359 - http://evuln.com/vulns/125/summary.html
CVE ID: CVE-2006-1818 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in warforge.NEWS 1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly including the (1) first_name and (2) last_name parameter in myaccounts.php. NOTE: portions of these details were obtained from third party sources instead of the original disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/432104/100/0/threaded - http://www.securityfocus.com/bid/17520 - http://www.
s: - http://www.securityfocus.com/archive/1/432104/100/0/threaded - http://www.securityfocus.com/bid/17520 - http://www.vupen.com/english/advisories/2006/1359 - http://evuln.com/vulns/125/summary.html
CVE ID: CVE-2006-1819 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:29.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the loadConfig function in index.php in phpWebSite 0.10.2 and earlier allows remote attackers to include arbitrary local files and execute arbitrary PHP code via the hub_dir parameter, as demonstrated by including access_log. NOTE: in some cases, arbitrary remote file inclusion could be performed under PHP 5 using an SMB share argument such as "\\systemname\sharename". Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015942 - https://exchange.x
itional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015942 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25867 - https://www.exploit-db.com/exploits/1673 - http://www.vupen.com/english/advisories/2006/1361 - http://secunia.com/advisories/19647 - http://secunia.com/advisories/19914 - http://www.gentoo.org/security/en/glsa/glsa-200605-04.xml - http://www.securityfocus.com/bid/17521 - http://downloads.securityfocus.com/vulnerabilities/exploits/PHPWebSite_fi_poc
CVE ID: CVE-2006-1820 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:29.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in ModX 0.9.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this might be resultant from the directory traversal vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19645 - http://www.securityfocus.com/archive/1/431010/100/0/threaded - http://www.vupen.com/english/advisories/2006/1383 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25894 - http://www.securityfocus.c
m/english/advisories/2006/1383 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25894 - http://www.securityfocus.com/bid/17533 - http://securitytracker.com/id?1015940
CVE ID: CVE-2006-1821 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in ModX 0.9.1 allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing NULL (%00) byte in the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19645 - http://www.securityfocus.com/archive/1/431010/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25895 - http://www.vupen.com/english/advisories/2006/1383 - http://www.securityfocus.com/bid/17533 - http://securitytracker.co
- http://www.vupen.com/english/advisories/2006/1383 - http://www.securityfocus.com/bid/17533 - http://securitytracker.com/id?1015940
CVE ID: CVE-2006-1822 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:29.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in FarsiNews 2.5.3 Pro and earlier allows remote attackers to inject arbitrary web script or HTML via the selected_search_arch parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431011/100/0/threaded - http://securitytracker.com/id?1015943 - http://securityreason.com/securityalert/710 - http://secunia.com/advisories/19648 - http://www.securityfocus.com/bid/17534 - http://www.aria-security.net/advisory/farsinew
//secunia.com/advisories/19648 - http://www.securityfocus.com/bid/17534 - http://www.aria-security.net/advisory/farsinews/farsinews042006.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/25833 - http://www.vupen.com/english/advisories/2006/1411
CVE ID: CVE-2006-1823 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:29.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in FarsiNews 2.5.3 Pro and earlier allows remote attackers to obtain the installation path via ".." sequences in the archive parameter to index.php, which leaks the full pathname in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431011/100/0/threaded - http://securitytracker.com/id?1015943 - http://securityreason.com/securityalert/710 - http://secunia.com/advisories/19648 - http://www.vupen.com/english/advisories/2006/1
urityreason.com/securityalert/710 - http://secunia.com/advisories/19648 - http://www.vupen.com/english/advisories/2006/1411
CVE ID: CVE-2006-1824 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:29.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PhpGuestbook.php in PhpGuestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Website, and (3) Comment parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25850 - http://www.securityfocus.com/bid/17594 - http://www.securityfocus.com/archive/1/431070/100/0/threaded - http://secunia.com/advisories/19669 - http://www.securityfocus.com/bid/17537 - http://www.
ive/1/431070/100/0/threaded - http://secunia.com/advisories/19669 - http://www.securityfocus.com/bid/17537 - http://www.vupen.com/english/advisories/2006/1422 - http://pridels0.blogspot.com/2006/04/phpguestbook-v10-script-insertion.html
CVE ID: CVE-2006-1825 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:29.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in phpLinks 2.1.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the term parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25890 - http://www.vupen.com/english/advisories/2006/1378 - http://pridels0.blogspot.com/2006/04/phplinks-2131-xss-vuln.html - http://www.securityfocus.com/bid/17586
CVE ID: CVE-2006-1826 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Snipe Gallery 3.1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gallery_id parameter in view.php, (2) keyword parameter in search.php, and (3) image_id parameter in image.php. NOTE: it is possible that vectors 1 and 3 are resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431123/100/0/threaded - http://www.securityfocus.com/archive/1/431074/100/0/thr
- http://www.securityfocus.com/archive/1/431123/100/0/threaded - http://www.securityfocus.com/archive/1/431074/100/0/threaded - http://www.securityfocus.com/bid/17543 - http://securitytracker.com/id?1015947 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25803
CVE ID: CVE-2006-1827 State: PUBLISHED Published: 2006-04-18T20:00:00 Last Updated: 2024-08-07T17:27:29.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19872 - http://www.vupen.com/english/advisories/2006/1478 - http://www.cipher.org.uk/index.php?p=advisories/Asterisk_Codec_Integer_Overflow_07-04-2006.advisory - http://www.debi
- http://www.cipher.org.uk/index.php?p=advisories/Asterisk_Codec_Integer_Overflow_07-04-2006.advisory - http://www.debian.org/security/2006/dsa-1048 - http://www.securityfocus.com/bid/17561 - http://ftp.digium.com/pub/asterisk/releases/asterisk-1.2.7-patch.gz - http://secunia.com/advisories/19800 - http://secunia.com/advisories/19897 - http://www.novell.com/linux/security/advisories/2006_04_28.html
CVE ID: CVE-2006-1828 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to execute arbitrary SQL commands and execute arbitrary code via the sess_username variable, as set by the php121un HTTP COOKIE parameter, which is used in multiple files including php121login.php. NOTE: the code execution occurs because the SQL query results are used in an include statement. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1349 - http://securitytracker.com/id?101
E Program Container: References: - http://www.vupen.com/english/advisories/2006/1349 - http://securitytracker.com/id?1015936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25785 - http://www.securityfocus.com/bid/17509 - http://retrogod.altervista.org/php121im_14_sql_xpl.html - http://secunia.com/advisories/19643 - https://www.exploit-db.com/exploits/1666
CVE ID: CVE-2006-1829 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: EAServer Manager in Sybase EAServer 5.2 and 5.3 allows remote authenticated users, possibly guests, to obtain password credentials of arbitrary users via unspecified vectors involving (1) connection caches, (2) open password prompts, and (3) stored custom connection profiles. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25777 - http://www.securityfocus.com/bid/17508 - http://secunia.com/advisories/19605 - http://www.vupen.com/english/advisories/2006/1344
w.securityfocus.com/bid/17508 - http://secunia.com/advisories/19605 - http://www.vupen.com/english/advisories/2006/1344 - http://www.sybase.com/detail?id=1040117 - http://securitytracker.com/id?1015913
CVE ID: CVE-2006-1830 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable permissions, which allows local users to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1357 - http://securitytracker.com/id?1015930 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102292-1 - http://secunia.com/advisories/19632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25822 - http://www.security
- http://secunia.com/advisories/19632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25822 - http://www.securityfocus.com/bid/17517
CVE ID: CVE-2006-1831 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:28.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in sysinfo.cgi in sysinfo 1.21 and possibly other versions before 2.25 allows remote attackers to execute arbitrary commands via a leading ; (semicolon) in the name parameter in a systemdoc action, which is injected into phpinfo.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17523 - http://www.vupen.com/english/advisories/2006/1360 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25906 - https://www.exploit-db.com/exploits/
advisories/2006/1360 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25906 - https://www.exploit-db.com/exploits/1677 - http://secunia.com/advisories/19690
CVE ID: CVE-2006-1832 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:29.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: sysinfo.cgi in sysinfo 1.21 allows remote attackers to obtain the installation path via the debugger action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17523 - http://www.vupen.com/english/advisories/2006/1360 - https://www.exploit-db.com/exploits/1677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25909 - http://secunia.com/advisories/19690
CVE ID: CVE-2006-1833 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:27:28.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intel RNG Driver in NetBSD 1.6 through 3.0 may incorrectly detect the presence of the pchb interface, which will cause it to always generate the same random number, which allows remote attackers to more easily crack encryption keys generated from the interface. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19585 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-009.txt.asc - http://www.securityfocus.com/bid/17496 - http://securitytracker.com/id?1015907 - https:
ries/NetBSD-SA2006-009.txt.asc - http://www.securityfocus.com/bid/17496 - http://securitytracker.com/id?1015907 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25786 - http://www.osvdb.org/24577