Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
://secunia.com/advisories/21243 - http://www.redhat.com/support/errata/RHSA-2006-0608.html - http://security.gentoo.org/glsa/glsa-200608-02.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://secunia.com/secunia_research/2006-53/advisory/ - http://www.vupen.com/english/advisories/2006/3748 - http://www.securityfocus.com/bid/19181 - http://www.us-cert.gov/cas/techalerts/TA06-208A.html - http://secunia.com/advisories/22055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27982 - http://www.vupen.com/english/advisories/2006/2998 - http://www.securityfocus.com/archive/1/441333/100/0/threaded - http://secunia.com/advisories/21529 - http://www.securityfocus.com/bid
curityfocus.com/archive/1/441333/100/0/threaded - http://secunia.com/advisories/21529 - http://www.securityfocus.com/bid/19197 - http://secunia.com/advisories/21216 - http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://www.vupen.com/english/advisories/2006/3749 - http://www.securityfocus.com/archive/1/441330/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2006-0610.html - http://securitytracker.com/id?1016588 - https://usn.ubuntu.com/329-1/ - http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - http://secuni
.mandriva.com/security/advisories?name=MDKSA-2006:146 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - http://secunia.com/advisories/22210 - http://secunia.com/advisories/21607 - http://securitytracker.com/id?1016586 - http://secunia.com/advisories/19873 - http://secunia.com/advisories/21262 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/advisories/2008/0083 - https://usn.ubuntu.com/327-1/ - http://secunia.com/advisories/21361 - http://secunia.com/advisories/21631 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://secunia.com/advisories/21275
/100/200/threaded - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://secunia.com/advisories/21275 - http://secunia.com/advisories/21246 - http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html - http://www.mozilla.org/security/announce/2006/mfsa2006-46.html - http://secunia.com/advisories/21229 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10261 - http://securitytracker.com/id?1016587 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.redhat.com/support/errata/RHSA-2006-0611.html - http://secunia.com/advisories/21228 - http://secunia.com/advisories/21250 - http://www.ubuntu.com/usn/us
006-0611.html - http://secunia.com/advisories/21228 - http://secunia.com/advisories/21250 - http://www.ubuntu.com/usn/usn-350-1 - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://secunia.com/advisories/21358 - https://issues.rpath.com/browse/RPL-536 - https://issues.rpath.com/browse/RPL-537 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21269 - http://security.gentoo.org/glsa/glsa-200608-04.xml - http://secunia.com/advisories/21343 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - http://secunia.com/advisories/22065 - http://www.ubuntu.com/usn/usn-354-1 - ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc
CVE ID: CVE-2006-3114 State: PUBLISHED Published: 2006-08-08T22:00:00 Last Updated: 2024-08-07T18:16:05.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: PC Tools AntiVirus 2.1.0.51 uses insecure default permissions on the "PC Tools AntiVirus" directory, which allows local users to gain privileges and execute commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19322 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28212 - http://secunia.com/secunia_research/2006-51/advisory/ - http://www.vupen.com/english/advisories/2006/3134 - http://www.securityfocus.com/archive/1/442102/100/0/threaded - http://securityreason.com/s
nglish/advisories/2006/3134 - http://www.securityfocus.com/archive/1/442102/100/0/threaded - http://securityreason.com/securityalert/1340 - http://securitytracker.com/id?1016634 - http://secunia.com/advisories/21075
CVE ID: CVE-2006-3115 State: PUBLISHED Published: 2006-06-29T21:00:00 Last Updated: 2024-08-07T18:16:05.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.php in phpRaid 3.0.4, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the raid_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-47/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/27457 - http://secunia.com/advisories/20200
CVE ID: CVE-2006-3116 State: PUBLISHED Published: 2006-06-29T21:00:00 Last Updated: 2024-08-07T18:16:05.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.4 and 3.0.5 allow remote attackers to execute arbitrary code via a URL in the phpraid_dir parameter to (1) configuration.php, (3) guilds.php, (4) index.php, (5) locations.php, (6) login.php, (7) lua_output.php, (8) permissions.php, (9) profile.php, (10) raids.php, (11) register.php, (12) roster.php, and (13) view.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26893 - http://www.osvdb.org/26902 - http://www.osvdb.org/26
- CVE Program Container: References: - http://www.osvdb.org/26893 - http://www.osvdb.org/26902 - http://www.osvdb.org/26901 - http://www.osvdb.org/26899 - http://secunia.com/secunia_research/2006-47/advisory/ - http://www.securityfocus.com/bid/18719 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27465 - http://www.osvdb.org/26892 - http://www.osvdb.org/26896 - http://www.osvdb.org/26891 - http://www.osvdb.org/26895 - http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0824.html - http://www.osvdb.org/26894 - http://www.osvdb.org/26900 - http://www.osvdb.org/26897 - http://www.osvdb.org/26898 - http://secunia.com/advisories/20200
CVE ID: CVE-2006-3117 State: PUBLISHED Published: 2006-06-30T18:00:00 Last Updated: 2024-08-07T18:16:05.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1104 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102501-1 - http://www.ub
ww.debian.org/security/2006/dsa-1104 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102501-1 - http://www.ubuntu.com/usn/usn-313-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27571 - https://issues.rpath.com/browse/RPL-475 - http://secunia.com/advisories/20893 - http://security.gentoo.org/glsa/glsa-200607-12.xml - http://www.vupen.com/english/advisories/2006/2621 - http://secunia.com/advisories/22129 - http://www.securityfocus.com/archive/1/447035/100/0/threaded - http://secunia.com/advisories/20975 - http://secunia.com/advisories/20867 - http://secunia.com/advisories/21278 - http://www.ngssoftware.com/advisories/openoffice.txt - http://www.securityfocus.com/bid/18739
ia.com/advisories/21278 - http://www.ngssoftware.com/advisories/openoffice.txt - http://www.securityfocus.com/bid/18739 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9704 - http://secunia.com/advisories/20910 - http://fedoranews.org/cms/node/2343 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:118 - http://secunia.com/advisories/20995 - http://secunia.com/advisories/20911 - http://www.openoffice.org/security/CVE-2006-3117.html - http://securitytracker.com/id?1016414 - http://secunia.com/advisories/23620 - http://www.redhat.com/support/errata/RHSA-2006-0573.html - http://www.novell.com/linux/security/advisories/2006_40_openoffice.html -
edhat.com/support/errata/RHSA-2006-0573.html - http://www.novell.com/linux/security/advisories/2006_40_openoffice.html - http://secunia.com/advisories/20913 - http://www.ubuntu.com/usn/usn-313-2 - http://www.vupen.com/english/advisories/2006/2607
CVE ID: CVE-2006-3118 State: PUBLISHED Published: 2006-06-30T19:00:00 Last Updated: 2024-08-07T18:16:05.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: spread uses a temporary file with a static filename based on the port number, which allows local users to cause a denial of service by creating the file during a race condition between unlink and bind function calls. NOTE: spread deletes this temporary file before use, which could cause conflicts with other programs that use the same filename, but this is not a distinct issue. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.net/distros/ubuntu/+source/spread/+bug/44171 - http://www.securityfoc
Program Container: References: - https://launchpad.net/distros/ubuntu/+source/spread/+bug/44171 - http://www.securityfocus.com/bid/18675 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=375617
CVE ID: CVE-2006-3119 State: PUBLISHED Published: 2006-07-25T23:00:00 Last Updated: 2024-08-07T18:16:05.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fbgs framebuffer Postscript/PDF viewer in fbi before 2.01 has a typo that prevents a filter from working correctly, which allows user-assisted attackers to bypass the filter and execute malicious Postscript commands. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200608-22.xml - http://www.securityfocus.com/bid/19131 - http://www.vupen.com/english/advisories/2006/2982 - http://secunia.com/advisories/21599 - http://secunia.com/advisories/21459 - http://www.novell.com/li
isories/2006/2982 - http://secunia.com/advisories/21599 - http://secunia.com/advisories/21459 - http://www.novell.com/linux/security/advisories/2006_19_sr.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28038 - http://www.debian.org/security/2006/dsa-1124 - http://secunia.com/advisories/21169 - http://secunia.com/advisories/21191
CVE ID: CVE-2006-3120 State: PUBLISHED Published: 2006-07-31T21:00:00 Last Updated: 2024-08-07T18:16:05.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified attack vectors related to the logging functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1129 - http://osiris.shmoo.com/ChangeLog - http://www.vupen.com/english/advisories/2006/3072 - http://www.securityfocus.com/bid/19213 - http://secunia.com/advisories/21265 - http://www.osv
ish/advisories/2006/3072 - http://www.securityfocus.com/bid/19213 - http://secunia.com/advisories/21265 - http://www.osvdb.org/27645 - http://secunia.com/advisories/21257 - http://osiris.shmoo.com/download.html
CVE ID: CVE-2006-3121 State: PUBLISHED Published: 2006-08-17T01:00:00 Last Updated: 2024-08-07T18:16:05.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service (crash) via the length parameter in a heartbeat message. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200608-23.xml - http://secunia.com/advisories/21629 - http://secunia.com/advisories/21511 - http://secunia.com/advisories/21505 - http://www.securityfocus.com/bid/19516 - http://www.li
unia.com/advisories/21511 - http://secunia.com/advisories/21505 - http://www.securityfocus.com/bid/19516 - http://www.linux-ha.org/_cache/SecurityIssues__sec03.txt - http://secunia.com/advisories/21518 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28396 - http://www.debian.org/security/2006/dsa-1151 - http://www.linux-ha.org/SecurityIssues - http://www.vupen.com/english/advisories/2006/3288 - http://www.ubuntu.com/usn/usn-335-1 - http://secunia.com/advisories/21521
CVE ID: CVE-2006-3122 State: PUBLISHED Published: 2006-08-09T22:00:00 Last Updated: 2024-08-07T18:16:05.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: The supersede_lease function in memory.c in ISC DHCP (dhcpd) server 2.0pl5 allows remote attackers to cause a denial of service (application crash) via a DHCPDISCOVER packet with a 32 byte client-identifier, which causes the packet to be interpreted as a corrupt uid and causes the server to exit with "corrupt lease uid." Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=380273 - http://www.debian.org/security/2006/dsa-1143 - http://www.vupen.com/english/advisories
gi-bin/bugreport.cgi?bug=380273 - http://www.debian.org/security/2006/dsa-1143 - http://www.vupen.com/english/advisories/2006/3158 - http://secunia.com/advisories/21655 - http://secunia.com/advisories/21363 - http://www.openbsd.org/errata.html#dhcpd - http://www.securityfocus.com/bid/19348 - http://secunia.com/advisories/21345 - http://securitytracker.com/id?1016755
CVE ID: CVE-2006-3123 State: PUBLISHED Published: 2006-08-07T19:00:00 Last Updated: 2024-08-07T18:16:05.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the (1) dodecrypt and (2) doencrypt functions in cfs_fh.c in cfsd in Matt Blaze Cryptographic File System (CFS) 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service (daemon crash) by appending data to a file that is larger than 2 Gb. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1138 - http://secunia.com/advisories/21341 - http://www.vupen.com/english/advisories/2006/3157 - http://www.securityfocus.
38 - http://secunia.com/advisories/21341 - http://www.vupen.com/english/advisories/2006/3157 - http://www.securityfocus.com/bid/19320 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=371076 - http://secunia.com/advisories/21310 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=371076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28288
CVE ID: CVE-2006-3124 State: PUBLISHED Published: 2006-08-26T10:00:00 Last Updated: 2024-08-07T18:16:05.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21749 - http://sourceforge.net/project/shownotes.php?release_id=442126 - http://www.debian.org/security/2006/dsa-1158 - http://secunia.com/advisories/21579 - http://secunia.com/advisories/21658 - http://secunia.com/advisories/21801 - http://www.sec
ecunia.com/advisories/21579 - http://secunia.com/advisories/21658 - http://secunia.com/advisories/21801 - http://www.securityfocus.com/bid/19707 - http://www.novell.com/linux/security/advisories/2006_21_sr.html - http://downloads.securityfocus.com/vulnerabilities/exploits/streamripper-aug292006.c - http://security.gentoo.org/glsa/glsa-200609-01.xml - http://www.vupen.com/english/advisories/2006/3387 - http://www.osvdb.org/28178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28567
CVE ID: CVE-2006-3125 State: PUBLISHED Published: 2006-08-31T21:00:00 Last Updated: 2024-08-07T18:16:05.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in tetrinet.c in gtetrinet 0.7.8 and earlier allows remote attackers to execute arbitrary code via a packet specifying a negative number of players, which is used as an array index. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28683 - http://secunia.com/advisories/21749 - http://www.debian.org/security/2006/dsa-1163 - http://security.gentoo.org/glsa/glsa-200609-02.xml - http://www.securityfocus.com/bid/19766 - http://secunia.com/advisori
ttp://security.gentoo.org/glsa/glsa-200609-02.xml - http://www.securityfocus.com/bid/19766 - http://secunia.com/advisories/21704 - http://www.novell.com/linux/security/advisories/2006_21_sr.html - http://www.osvdb.org/28269 - http://secunia.com/advisories/21800 - http://secunia.com/advisories/21691
CVE ID: CVE-2006-3126 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T18:16:05.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null (\0) and shell metacharacters in the TSI string, as demonstrated by a fax from an anonymous number. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19801 - http://secunia.com/advisories/21726 - http://www.novell.com/linux/security/advisories/2007_4_sr.html - http://secunia.com/advisories/22450 - http://www.vupen.com/english/advisories/2006/3430 - http://secunia.com/advisories/21722
//secunia.com/advisories/22450 - http://www.vupen.com/english/advisories/2006/3430 - http://secunia.com/advisories/21722 - http://security.gentoo.org/glsa/glsa-200610-05.xml - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=382474 - http://www.debian.org/security/2006/dsa-1165
CVE ID: CVE-2006-3127 State: PUBLISHED Published: 2006-06-21T23:00:00 Last Updated: 2024-08-07T18:16:05.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Network Security Services (NSS) 3.11, as used in Sun Java Enterprise System 2003Q4 through 2005Q1 and Java System Directory Server 5.2, allows remote attackers to cause a denial of service (memory consumption) by performing a large number of RSA cryptographic operations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18604 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102461-1 - http://www.vupen.com/english/advisories/2007/1573 - http://securitytrac
.com/search/document.do?assetkey=1-26-102461-1 - http://www.vupen.com/english/advisories/2007/1573 - http://securitytracker.com/id?1016294 - http://secunia.com/advisories/25048 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102896-1 - http://www.redhat.com/archives/fedora-package-announce/2006-June/msg00155.html - http://www.securityfocus.com/bid/20846
CVE ID: CVE-2006-3128 State: PUBLISHED Published: 2006-06-21T23:00:00 Last Updated: 2024-08-07T18:16:05.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: choose_file.php in easy-CMS 0.1.2, when mod_mime is installed, does not restrict uploads of filenames with multiple extensions, which allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a GIF file extension, then directly accessing that file in the Repositories directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20733 - http://www.securityfocus.com/archive/1/437705/100/0/threaded - http://securitytracker.com/id?1016335 - http://www.vupen.com/e
//www.securityfocus.com/archive/1/437705/100/0/threaded - http://securitytracker.com/id?1016335 - http://www.vupen.com/english/advisories/2006/2419 - http://biyosecurity.be/bugs/easycms.txt - http://www.securityfocus.com/bid/18496 - http://www.osvdb.org/26633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27281
CVE ID: CVE-2006-3129 State: PUBLISHED Published: 2006-06-22T01:00:00 Last Updated: 2024-08-07T18:16:05.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in NC LinkList 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) view parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2438 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27248 - http://www.securityfocus.com/bid/18546 - http://secunia.com/advisories/20691 - http://www.osvdb.org/26675 - http://pridels0.blogspot.com/2006/06/nc-linklis
546 - http://secunia.com/advisories/20691 - http://www.osvdb.org/26675 - http://pridels0.blogspot.com/2006/06/nc-linklist-xss-vuln.html
CVE ID: CVE-2006-3130 State: PUBLISHED Published: 2006-06-22T01:00:00 Last Updated: 2024-08-07T18:16:05.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Clubpage allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26690 - http://pridels0.blogspot.com/2006/06/clubpage-vuln.html - http://secunia.com/advisories/20706 - http://www.vupen.com/english/advisories/2006/2461 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27247 - http://www.securityfocus.com/bid/18552
CVE ID: CVE-2006-3131 State: PUBLISHED Published: 2006-06-22T01:00:00 Last Updated: 2024-08-07T18:16:06.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Clubpage allow remote attackers to inject arbitrary web script or HTML via the (1) news_archive, (2) language, and (3) intranetLogin parameters in (a) index.php; the (4) sites_id parameter in (b) sites.php; and the (5) news_id parameter in (c) news_more.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27243 - http://www.osvdb.org/26688 - http://www.osvdb.org/26687 - http://pridels0.blogspot.com/2006/
com/vulnerabilities/27243 - http://www.osvdb.org/26688 - http://www.osvdb.org/26687 - http://pridels0.blogspot.com/2006/06/clubpage-vuln.html - http://www.osvdb.org/26689 - http://secunia.com/advisories/20706 - http://www.vupen.com/english/advisories/2006/2461 - http://www.securityfocus.com/bid/18552
CVE ID: CVE-2006-3132 State: PUBLISHED Published: 2006-06-22T01:00:00 Last Updated: 2024-08-07T18:16:05.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in qtofm.php4 in QTOFileManager 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter, as originally reported for index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27310 - http://secunia.com/advisories/20681 - http://www.securityfocus.com/archive/1/437754/100/0/threaded - http://www.vupen.com/english/advisories/2006/2434 - http://secu
/www.securityfocus.com/archive/1/437754/100/0/threaded - http://www.vupen.com/english/advisories/2006/2434 - http://securitytracker.com/id?1016333 - http://securityreason.com/securityalert/1118
CVE ID: CVE-2006-3134 State: PUBLISHED Published: 2006-06-27T17:00:00 Last Updated: 2024-08-07T18:16:05.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string. Additional Analyst Notes: - CVE Program Container: References: - http://europe.nokia.com/nokia/0%2C%2C93034%2C00.html - http://www.securityfocus.com/bid/18678 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047420.html - http://www.osvdb.org/26874 - http://www.vupen.com/english/advisories/2006/2562 - http://www.kb.cert.org/vuls