Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tp://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://www.securityfocus.com/archive/1/435795/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2006-0610.html - http://secunia.com/advisories/20376 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - http://secunia.com/advisories/21178 - http://securitytracker.com/id?1016202 - http://www.mozilla.org/security/announce/2006/mfsa2006-36.html - http://www.securityfocus.com/bid/18228 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/21188 - http://secunia.com/advisories/21134 - http:/
en.com/english/advisories/2008/0083 - http://secunia.com/advisories/21188 - http://secunia.com/advisories/21134 - http://secunia.com/advisories/21631 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26847 - https://usn.ubuntu.com/296-2/ - http://www.debian.org/security/2006/dsa-1118 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.debian.org/security/2006/dsa-1120 - http://www.redhat.com/support/errata/RHSA-2006-0611.html - http://www.debian.org/security/2006/dsa-1134 - http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml - http://secunia.com/advisories/21324 - http://secunia.com/advisori
//www.gentoo.org/security/en/glsa/glsa-200606-12.xml - http://secunia.com/advisories/21324 - http://secunia.com/advisories/21183 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21269 - http://www.novell.com/linux/security/advisories/2006_35_mozilla.html - http://www.redhat.com/support/errata/RHSA-2006-0578.html - http://www.vupen.com/english/advisories/2006/2106 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143
CVE ID: CVE-2006-2785 State: PUBLISHED Published: 2006-06-02T19:00:00 Last Updated: 2024-08-07T18:06:26.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into (1) performing a "View Image" on a broken image in which the SRC attribute contains a Javascript URL, or (2) selecting "Show only this frame" on a frame whose SRC attribute contains a Javascript URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21176 - http://www.mandriva.com/security/advisories?name=MDKS
ram Container: References: - http://secunia.com/advisories/21176 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.vupen.com/english/advisories/2006/3748 - https://usn.ubuntu.com/296-1/ - https://usn.ubuntu.com/323-1/ - http://secunia.com/advisories/20561 - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://www.securityfocus.com/archive/1/435795/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2006-0610.html - http://secunia.com/advisories/20376 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26845 - http://secunia.com/advisories/21178 - http:/
06-0609.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26845 - http://secunia.com/advisories/21178 - http://securitytracker.com/id?1016202 - http://www.securityfocus.com/bid/18228 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/advisories/2008/0083 - http://www.mozilla.org/security/announce/2006/mfsa2006-34.html - http://secunia.com/advisories/21188 - http://secunia.com/advisories/21134 - http://secunia.com/advisories/21631 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10545 - https://usn.ubuntu.com/296-2/ - http:/
cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10545 - https://usn.ubuntu.com/296-2/ - http://www.debian.org/security/2006/dsa-1118 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.debian.org/security/2006/dsa-1120 - http://www.redhat.com/support/errata/RHSA-2006-0611.html - http://www.debian.org/security/2006/dsa-1134 - http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml - http://secunia.com/advisories/21324 - http://secunia.com/advisories/21183 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21269 - http://www.novell.com/linux/security/advisories/2006_35_mozilla.html - http://www.redhat.com/support/errata/R
es/21269 - http://www.novell.com/linux/security/advisories/2006_35_mozilla.html - http://www.redhat.com/support/errata/RHSA-2006-0578.html - http://www.vupen.com/english/advisories/2006/2106 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143
CVE ID: CVE-2006-2786 State: PUBLISHED Published: 2006-06-02T20:00:00 Last Updated: 2024-08-07T18:06:26.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via (1) invalid HTTP response headers with spaces between the header name and the colon, which might not be ignored in some cases, or (2) HTTP 1.1 headers through an HTTP 1.0 proxy, which are ignored by the proxy but processed by the client. Additional Analyst Notes: - CVE Program
an HTTP 1.0 proxy, which are ignored by the proxy but processed by the client. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20709 - http://secunia.com/advisories/21176 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.vupen.com/english/advisories/2006/3748 - https://usn.ubuntu.com/296-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/26844 - https://usn.ubuntu.com/323-1/ - http://secunia.com/advisories/20561 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9966 - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://
%3Adef%3A9966 - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://secunia.com/advisories/20382 - http://securitytracker.com/id?1016214 - http://www.securityfocus.com/archive/1/435795/100/0/threaded - http://www.vupen.com/english/advisories/2006/3749 - http://www.redhat.com/support/errata/RHSA-2006-0610.html - http://secunia.com/advisories/20376 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - http://secunia.com/advisories/21178 - http://securitytracker.com/id?1016202 - http://www.securityfocus.com/bid/18228 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/advisories/2008/0083 -
secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/21188 - http://secunia.com/advisories/21134 - http://secunia.com/advisories/21631 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.securityfocus.com/archive/1/446657/100/200/threaded - https://usn.ubuntu.com/296-2/ - http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml - http://www.debian.org/security/2006/dsa-1118 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.debian.org/security/2006/dsa-1120 - http://www.redhat.com/support/errata/RHSA-2006-0611.html - http://www.securityfocus.
debian.org/security/2006/dsa-1120 - http://www.redhat.com/support/errata/RHSA-2006-0611.html - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://www.debian.org/security/2006/dsa-1134 - http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml - http://secunia.com/advisories/21324 - http://secunia.com/advisories/21183 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21269 - http://www.novell.com/linux/security/advisories/2006_35_mozilla.html - http://www.mozilla.org/security/announce/2006/mfsa2006-33.html - https://usn.ubuntu.com/297-1/ - http://www.redhat.com/support/errata/RHSA-2006-0578.html - http://www.vupen.com/english/advisories/2006/2106 - ht
7-1/ - http://www.redhat.com/support/errata/RHSA-2006-0578.html - http://www.vupen.com/english/advisories/2006/2106 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - http://secunia.com/advisories/22065
CVE ID: CVE-2006-2787 State: PUBLISHED Published: 2006-06-02T20:00:00 Last Updated: 2024-08-07T18:06:26.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20709 - http://secunia.com/advisories/21176 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.mozilla.org/security/announce/2006/mfsa2006-31.html - http://www.vupen.com/english/advisories/2006/3748 - htt
http://www.mozilla.org/security/announce/2006/mfsa2006-31.html - http://www.vupen.com/english/advisories/2006/3748 - https://usn.ubuntu.com/297-3/ - https://usn.ubuntu.com/296-1/ - https://usn.ubuntu.com/323-1/ - http://secunia.com/advisories/20561 - http://secunia.com/advisories/21210 - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://secunia.com/advisories/20382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26842 - http://securitytracker.com/id?1016214 - http://www.securityfocus.com/archive/1/435795/100/0/threaded - http://www.vupen.com/english/advisories/2006/3749 - http://www.redhat.com/support/errata/RHSA-2006-0610.html - h
eaded - http://www.vupen.com/english/advisories/2006/3749 - http://www.redhat.com/support/errata/RHSA-2006-0610.html - http://secunia.com/advisories/20376 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - http://secunia.com/advisories/21178 - http://securitytracker.com/id?1016202 - http://secunia.com/advisories/21607 - http://www.securityfocus.com/bid/18228 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/21188 - http://secunia.com/advisories/21134 - http://secunia.com/advisories/21631 - http://www.securityfocus.co
visories/21188 - http://secunia.com/advisories/21134 - http://secunia.com/advisories/21631 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.securityfocus.com/archive/1/446657/100/200/threaded - https://usn.ubuntu.com/296-2/ - http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml - http://www.debian.org/security/2006/dsa-1118 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.debian.org/security/2006/dsa-1120 - http://www.redhat.com/support/errata/RHSA-2006-0611.html - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://www.debian.org/security/2006/dsa-1134 - http://www.gentoo.org/security/en/glsa/glsa-200606-12.x
00/200/threaded - http://www.debian.org/security/2006/dsa-1134 - http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml - http://secunia.com/advisories/21324 - http://secunia.com/advisories/21183 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9491 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21269 - http://www.novell.com/linux/security/advisories/2006_35_mozilla.html - https://usn.ubuntu.com/297-1/ - http://www.redhat.com/support/errata/RHSA-2006-0578.html - http://www.vupen.com/english/advisories/2006/2106 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - http://secunia.com/advisories/22065
CVE ID: CVE-2006-2788 State: PUBLISHED Published: 2006-06-02T21:00:00 Last Updated: 2024-08-07T18:06:25.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - https://usn.ubuntu.com/296-1/ - http://www.ubuntu.com/usn/usn-361-1 - https://bugzilla.mozilla.org/show_bug.cgi?id=321598 - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia
/bugzilla.mozilla.org/show_bug.cgi?id=321598 - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://www.redhat.com/support/errata/RHSA-2006-0610.html - http://secunia.com/advisories/22247 - http://www.us.debian.org/security/2006/dsa-1191 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - http://www.debian.org/security/2006/dsa-1210 - http://secunia.com/advisories/22849 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://secunia.com/advisories/21631 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11065 - http://www.debian.org/security/2006/dsa-1192 - http://www.redhat
search/definition/oval%3Aorg.mitre.oval%3Adef%3A11065 - http://www.debian.org/security/2006/dsa-1192 - http://www.redhat.com/support/errata/RHSA-2006-0611.html - http://secunia.com/advisories/22342 - http://secunia.com/advisories/21269 - http://www.redhat.com/support/errata/RHSA-2006-0578.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - http://secunia.com/advisories/22299
CVE ID: CVE-2006-2789 State: PUBLISHED Published: 2006-06-02T22:00:00 Last Updated: 2024-08-07T18:06:25.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote attackers to cause a denial of service (persistent crash) via a crafted "From" header that triggers an assert error in camel-internet-address.c when a null pointer is used. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:094 - http://www.securityfocus.com/bid/18212 - http://bugzilla.gnome.org/show_bug.cgi?id=311440 - http://bugzilla.gn
006:094 - http://www.securityfocus.com/bid/18212 - http://bugzilla.gnome.org/show_bug.cgi?id=311440 - http://bugzilla.gnome.org/show_bug.cgi?id=309453
CVE ID: CVE-2006-2790 State: PUBLISHED Published: 2006-06-02T22:00:00 Last Updated: 2024-08-07T18:06:25.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: A package component in Sun Storage Automated Diagnostic Environment (StorADE) 2.4 uses world-writable permissions for certain critical files and directories, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26899 - http://secunia.com/advisories/20445 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102305-1 - http://securitytracker.com/id?1016215 - http://www.securityfocus.com/bid/18266 - http://www.vupen
setkey=1-26-102305-1 - http://securitytracker.com/id?1016215 - http://www.securityfocus.com/bid/18266 - http://www.vupen.com/english/advisories/2006/2139
CVE ID: CVE-2006-2791 State: PUBLISHED Published: 2006-06-03T01:00:00 Last Updated: 2024-08-07T18:06:25.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in iBoutique.MALL and possibly iBoutique allows remote attackers to read arbitrary files via ".." sequences in the function parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435164/100/0/threaded - http://securityreason.com/securityalert/1023 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26739
CVE ID: CVE-2006-2792 State: PUBLISHED Published: 2006-06-03T01:00:00 Last Updated: 2024-08-07T18:06:25.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in misc.php in Woltlab Burning Board (WBB) 2.3.4 allows remote attackers to execute arbitrary SQL commands via the sid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2006-05/0760.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26754 - http://www.securityfocus.com/archive/1/435368/100/0/threaded - http://securityreason.com/securityalert/1022
CVE ID: CVE-2006-2793 State: PUBLISHED Published: 2006-06-03T01:00:00 Last Updated: 2024-08-07T18:06:26.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Anket.asp in ASPSitem 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the hid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20355 - http://www.nukedx.com/?viewdoc=39 - http://securityreason.com/securityalert/745 - http://www.securityfocus.com/archive/1/435287/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26858 - http://securityreason.com/securityalert/1021
CVE ID: CVE-2006-2794 State: PUBLISHED Published: 2006-06-03T01:00:00 Last Updated: 2024-08-07T18:06:25.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hesabim.asp in ASPSitem 2.0 and earlier allows remote attackers to read private messages of other users via a modified id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26859 - http://www.nukedx.com/?viewdoc=39 - http://www.securityfocus.com/archive/1/435287/100/0/threaded - http://securityreason.com/securityalert/1021
CVE ID: CVE-2006-2795 State: PUBLISHED Published: 2006-06-03T01:00:00 Last Updated: 2024-08-07T18:06:25.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in XiTi Tracking Script 6 and 7 RC allow remote attackers to inject arbitrary web script or HTML via (1) the xtref parameter in xiti.js and (2) an HTTP Referer header field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25844 - http://www.securityfocus.com/bid/18710 - http://secunia.com/advisories/20363
CVE ID: CVE-2006-2796 State: PUBLISHED Published: 2006-06-03T01:00:00 Last Updated: 2024-08-07T18:06:25.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in gallery.php in Captivate 1.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter, which is reflected in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18072 - http://securityreason.com/securityalert/1020 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0413.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26589
CVE ID: CVE-2006-2797 State: PUBLISHED Published: 2006-06-03T01:00:00 Last Updated: 2024-08-07T18:06:25.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to execute arbitrary SQL commands via the (1) CalendarDetailsID parameter in (a) month.php, (b) day.php, and (c) delCalendar.php; (2) ID parameter in (d) event.php; (3) AdminUserID parameter in (e) delAdmin.php; (4) EventLocationID parameter in (f) delAddress.php; and (5) LocationID parameter in (g) delCategory.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/2664
ditional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26648 - https://www.exploit-db.com/exploits/1818
CVE ID: CVE-2006-2798 State: PUBLISHED Published: 2006-06-03T01:00:00 Last Updated: 2024-08-07T18:06:25.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) LoName parameter in (a) week.php and (b) month.php and (2) AddressLink parameter in (c) event.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/31692 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26648 - http://www.osvdb.org/31691 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26647 - http://www.osvdb.org/31693 - htt
tp://www.osvdb.org/31691 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26647 - http://www.osvdb.org/31693 - https://www.exploit-db.com/exploits/1818
CVE ID: CVE-2006-2799 State: PUBLISHED Published: 2006-06-03T10:00:00 Last Updated: 2024-08-07T18:06:25.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in content_footer.php in toendaCMS 0.7.0 allows remote attackers to inject arbitrary web scripts or HTML via the print_url variable. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27611 - http://www.vupen.com/english/advisories/2006/2081 - http://www.securityfocus.com/bi
ibmcloud.com/vulnerabilities/27611 - http://www.vupen.com/english/advisories/2006/2081 - http://www.securityfocus.com/bid/18207
CVE ID: CVE-2006-2800 State: PUBLISHED Published: 2006-06-03T10:00:00 Last Updated: 2024-08-07T18:06:26.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Unak CMS 1.5 RC2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) u_a or (2) u_s parameters. NOTE: this might be resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20410 - http://www.vupen.com/english/advisories/2006/2116 - http://www.securityfocus.com/bid/18253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26896 - http://pridels0.blogspot.com/2006/06/una
us.com/bid/18253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26896 - http://pridels0.blogspot.com/2006/06/unak-cms-vuln.html
CVE ID: CVE-2006-2801 State: PUBLISHED Published: 2006-06-03T10:00:00 Last Updated: 2024-08-07T18:06:26.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Unak CMS 1.5 RC2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) u_a or (2) u_s parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20410 - http://www.vupen.com/english/advisories/2006/2116 - http://www.securityfocus.com/bid/18253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26895 - http://pridels0.blogspot.com/2006/06/unak-cms-vuln.html
CVE ID: CVE-2006-2802 State: PUBLISHED Published: 2006-06-03T10:00:00 Last Updated: 2024-08-07T18:06:26.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial of service (application crash) via a long reply from an HTTP server, as demonstrated using gxine 0.5.6. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1105 - http://www.osvdb.org/25936 - http://secunia.com/advisories/20369 - http://secunia.com/advisories/20942 - http://secunia.com/advisories/20766 - http://security.gentoo.org/glsa/glsa-200609-08.xml - h