Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4806 State: PUBLISHED Published: 2006-11-07T00:00:00 Last Updated: 2024-08-07T19:23:41.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) ARGB (loader_argb.c), (2) PNG (loader_png.c), (3) LBM (loader_lbm.c), (4) JPEG (loader_jpeg.c), or (5) TIFF (loader_tiff.c) images. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22932 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:156 - http://secunia.com/advisories/22752 - http://www.mandriva.com/secu
andriva.com/security/advisories?name=MDKSA-2007:156 - http://secunia.com/advisories/22752 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:198 - http://www.osvdb.org/30106 - http://www.osvdb.org/30109 - http://www.novell.com/linux/security/advisories/2006_26_sr.html - http://www.securityfocus.com/bid/20903 - http://www.osvdb.org/30108 - http://www.discontinuity.info/~rowan/pocs/libimlib2_pocs-1.2.0-2.2.tar.gz - http://www.osvdb.org/30105 - http://www.ubuntu.com/usn/usn-376-2 - http://www.osvdb.org/30107 - http://security.gentoo.org/glsa/glsa-200612-20.xml - http://www.vupen.com/english/advisories/2006/4349 - http://secunia.com/advisories/23441 - http://secunia.com/advisories/227
p://www.vupen.com/english/advisories/2006/4349 - http://secunia.com/advisories/23441 - http://secunia.com/advisories/22732 - http://secunia.com/advisories/22744 - http://www.ubuntu.com/usn/usn-376-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30064
CVE ID: CVE-2006-4807 State: PUBLISHED Published: 2006-11-07T00:00:00 Last Updated: 2024-08-07T19:23:41.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) via a crafted TGA image that triggers an out-of-bounds memory read, a different issue than CVE-2006-4808. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22932 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:156 - http://secunia.com/advisories/22752 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:198 - http://www.n
6 - http://secunia.com/advisories/22752 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:198 - http://www.novell.com/linux/security/advisories/2006_26_sr.html - http://www.osvdb.org/30102 - http://www.securityfocus.com/bid/20903 - http://www.discontinuity.info/~rowan/pocs/libimlib2_pocs-1.2.0-2.2.tar.gz - http://www.ubuntu.com/usn/usn-376-2 - http://security.gentoo.org/glsa/glsa-200612-20.xml - http://www.vupen.com/english/advisories/2006/4349 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30066 - http://secunia.com/advisories/23441 - http://secunia.com/advisories/22732 - http://secunia.com/advisories/22744 - http://www.ubuntu.com/usn/usn-376-1
CVE ID: CVE-2006-4808 State: PUBLISHED Published: 2006-11-07T00:00:00 Last Updated: 2024-08-07T19:23:41.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TGA image. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30068 - http://secunia.com/advisories/22932 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:156 - http://secunia.com/advisories/22752 - http://www.mandriva.com/security
iva.com/security/advisories?name=MDKSA-2007:156 - http://secunia.com/advisories/22752 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:198 - http://www.novell.com/linux/security/advisories/2006_26_sr.html - http://www.securityfocus.com/bid/20903 - http://www.discontinuity.info/~rowan/pocs/libimlib2_pocs-1.2.0-2.2.tar.gz - http://www.ubuntu.com/usn/usn-376-2 - http://security.gentoo.org/glsa/glsa-200612-20.xml - http://www.vupen.com/english/advisories/2006/4349 - http://secunia.com/advisories/23441 - http://www.osvdb.org/30103 - http://secunia.com/advisories/22732 - http://secunia.com/advisories/22744 - http://www.ubuntu.com/usn/usn-376-1
CVE ID: CVE-2006-4809 State: PUBLISHED Published: 2006-11-07T00:00:00 Last Updated: 2024-08-07T19:23:41.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in loader_pnm.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM image. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22932 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:156 - http://secunia.com/advisories/22752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30070 - http://www.mandriva.com/securit
unia.com/advisories/22752 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30070 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:198 - http://www.osvdb.org/30104 - http://www.novell.com/linux/security/advisories/2006_26_sr.html - http://www.securityfocus.com/bid/20903 - http://www.discontinuity.info/~rowan/pocs/libimlib2_pocs-1.2.0-2.2.tar.gz - http://www.ubuntu.com/usn/usn-376-2 - http://security.gentoo.org/glsa/glsa-200612-20.xml - http://www.vupen.com/english/advisories/2006/4349 - http://secunia.com/advisories/23441 - http://secunia.com/advisories/22732 - http://secunia.com/advisories/22744 - http://www.ubuntu.com/usn/usn-376-1
CVE ID: CVE-2006-4810 State: PUBLISHED Published: 2006-11-08T21:00:00 Last Updated: 2024-08-07T19:23:41.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in texinfo 4.8 and earlier allows local users to execute arbitrary code via a crafted Texinfo file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22725 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:203 - http://www.redhat.com/support/errata/RHSA-2006-0727.html - http://secunia.com/advisories/22777 - http://www.ubuntu.com/usn/usn-379-1 - http://www.s
rt/errata/RHSA-2006-0727.html - http://secunia.com/advisories/22777 - http://www.ubuntu.com/usn/usn-379-1 - http://www.securityfocus.com/bid/20959 - http://secunia.com/advisories/22995 - http://www.vupen.com/english/advisories/2006/4412 - http://www.securityfocus.com/archive/1/464745/100/0/threaded - http://www.novell.com/linux/security/advisories/2006_28_sr.html - http://secunia.com/advisories/23015 - http://www.vupen.com/english/advisories/2007/1267 - https://issues.rpath.com/browse/RPL-810 - http://security.gentoo.org/glsa/glsa-200611-16.xml - http://secunia.com/advisories/23335 - http://secunia.com/advisories/23112 - http://www.vmware.com/support/vi3/doc/esx-2559638-patch.html - http://w
es/23335 - http://secunia.com/advisories/23112 - http://www.vmware.com/support/vi3/doc/esx-2559638-patch.html - http://www.trustix.org/errata/2006/0063/ - ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P - http://secunia.com/advisories/24788 - http://cvs.savannah.gnu.org/viewcvs/texinfo/texinfo/util/texindex.c?r1=1.16&r2=1.17 - http://www.securityfocus.com/archive/1/452723/100/0/threaded - http://secunia.com/advisories/22898 - http://secunia.com/advisories/22929 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10893 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30158 - http://www.openpkg.org/security/advisories/OpenPKG-SA-2
3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30158 - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.034-texinfo.html - http://www.vmware.com/support/vi3/doc/esx-1121906-patch.html - http://secunia.com/advisories/22798 - http://www.debian.org/security/2006/dsa-1219
CVE ID: CVE-2006-4811 State: PUBLISHED Published: 2006-10-18T17:00:00 Last Updated: 2024-08-07T19:23:41.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017084 - http://www.redhat.com/support/errata/RHSA-2006-0725.html - http://secunia.com/advisories/22738 - http://secunia.com/advisories/22485 - http://s
upport/errata/RHSA-2006-0725.html - http://secunia.com/advisories/22738 - http://secunia.com/advisories/22485 - http://secunia.com/advisories/22586 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10218 - http://secunia.com/advisories/22579 - http://secunia.com/advisories/22520 - http://secunia.com/advisories/22479 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:186 - http://www.trolltech.com/company/newsroom/announcements/press.2006-10-19.5434451733 - http://secunia.com/advisories/22380 - http://www.ubuntu.com/usn/usn-368-1 - ftp://patches.sgi.com/support/free/security/advisories/20061002-01-P - http://www.mandriva.com/security/advisorie
68-1 - ftp://patches.sgi.com/support/free/security/advisories/20061002-01-P - http://www.mandriva.com/security/advisories?name=MDKSA-2006:187 - http://secunia.com/advisories/22645 - http://www.securityfocus.com/bid/20599 - ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210742 - http://security.gentoo.org/glsa/glsa-200703-06.xml - http://secunia.com/advisories/24347 - http://secunia.com/advisories/22890 - http://secunia.com/advisories/22397 - http://www.redhat.com/support/errata/RHSA-2006-0720.html - http://secunia.com/advisories/22929 - http://security.gentoo.org/glsa/glsa-200611-02.xml - http://www.us.debian.org/sec
http://secunia.com/advisories/22929 - http://security.gentoo.org/glsa/glsa-200611-02.xml - http://www.us.debian.org/security/2006/dsa-1200 - http://www.vupen.com/english/advisories/2006/4099 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.483634 - http://lists.suse.com/archive/suse-security-announce/2006-Oct/0006.html - http://secunia.com/advisories/22492 - http://secunia.com/advisories/22589 - https://issues.rpath.com/browse/RPL-723 - http://www.securityfocus.com/archive/1/449173/100/0/threaded
CVE ID: CVE-2006-4812 State: PUBLISHED Published: 2006-10-09T18:00:00 Last Updated: 2024-08-07T19:23:41.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22300 - http://secunia.com/advisories/22650 - http://securitytracker.com/id?1016984 - http://secunia.com/advisories/22281 - http://secunia.com/a
om/advisories/22650 - http://securitytracker.com/id?1016984 - http://secunia.com/advisories/22281 - http://secunia.com/advisories/22338 - http://www.securityfocus.com/bid/20349 - http://www.securityfocus.com/archive/1/448953/100/0/threaded - http://www.gentoo.org/security/en/glsa/glsa-200610-14.xml - http://www.trustix.org/errata/2006/0055 - http://rhn.redhat.com/errata/RHSA-2006-0688.html - http://www.ubuntu.com/usn/usn-362-1 - http://rhn.redhat.com/errata/RHSA-2006-0708.html - http://secunia.com/advisories/22538 - http://securityreason.com/securityalert/1691 - http://www.hardened-php.net/advisory_092006.133.html - http://secunia.com/advisories/22533 - http://www.hardened-php.net/files/CVE-
hardened-php.net/advisory_092006.133.html - http://secunia.com/advisories/22533 - http://www.hardened-php.net/files/CVE-2006-4812.patch - http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/29362 - http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_alloc.c?r1=1.161&r2=1.162 - http://lists.suse.com/archive/suse-security-announce/2006-Oct/0002.html - http://www.securityfocus.com/archive/1/448014/100/0/threaded - http://secunia.com/advisories/22331 - http://www.vupen.com/english/advisories/2006/3922 - http://secunia.com/advisories/22280 - http://support.avaya.com/elmodocs2/security/ASA-2006-234.htm
CVE ID: CVE-2006-4813 State: PUBLISHED Published: 2006-10-12T20:00:00 Last Updated: 2024-08-07T19:23:41.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: The __block_prepare_write function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error conditions, which allows local users to read portions of files that have been unlinked. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207463 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:025 - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - http://www.kernel.org/git/?p=linux/kernel
07:025 - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=152becd26e0563aefdbc4fd1fe491928efe92d1f - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11701 - http://rhn.redhat.com/errata/RHSA-2007-0014.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:012 - http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm - http://www.securityfocus.com/bid/21522 - http://secunia.com/advisories/23384 - http://secunia.com/advisories/23752 - http://secunia.com/advisories/24206 - http://secunia.com/advisories/23474 - http://www.us.debian.org/s
dvisories/23752 - http://secunia.com/advisories/24206 - http://secunia.com/advisories/23474 - http://www.us.debian.org/security/2006/dsa-1233 - http://secunia.com/advisories/23370 - http://secunia.com/advisories/23997 - http://www.ubuntu.com/usn/usn-395-1 - http://osvdb.org/31376
CVE ID: CVE-2006-4814 State: PUBLISHED Published: 2006-12-20T02:00:00 Last Updated: 2024-08-07T19:23:41.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.org/errata/2007/0002/ - http://secunia.com/advisories/24098 - http://secunia.com/advisories/23609 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9648 - http://rhn.redhat.com/errata/RHSA-2007-0014.html - http://secunia.com/a
/definition/oval%3Aorg.mitre.oval%3Adef%3A9648 - http://rhn.redhat.com/errata/RHSA-2007-0014.html - http://secunia.com/advisories/23436 - http://www.securityfocus.com/bid/21663 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:040 - http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm - http://www.ubuntu.com/usn/usn-416-1 - http://secunia.com/advisories/24100 - http://secunia.com/advisories/30110 - http://www.vupen.com/english/advisories/2008/2222/references - http://www.vupen.com/english/advisories/2006/5082 - http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.6 - http://secunia.com/advisories/33280 - http://secunia.com/advisories/24206 - http://secunia.com/adv
/ChangeLog-2.4.33.6 - http://secunia.com/advisories/33280 - http://secunia.com/advisories/24206 - http://secunia.com/advisories/23997 - http://www.securityfocus.com/archive/1/471457 - http://secunia.com/advisories/24482 - http://www.novell.com/linux/security/advisories/2007_18_kernel.html - http://www.debian.org/security/2008/dsa-1503 - http://secunia.com/advisories/29058 - http://www.debian.org/security/2007/dsa-1304 - http://www.redhat.com/support/errata/RHSA-2008-0211.html - http://secunia.com/advisories/25714 - http://www.redhat.com/support/errata/RHSA-2008-0787.html - http://lists.vmware.com/pipermail/security-announce/2008/000023.html - http://secunia.com/advisories/25691 - http://www.
http://lists.vmware.com/pipermail/security-announce/2008/000023.html - http://secunia.com/advisories/25691 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:060 - http://secunia.com/advisories/31246
CVE ID: CVE-2006-4819 State: PUBLISHED Published: 2006-10-17T21:00:00 Last Updated: 2024-08-07T19:23:41.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag (long link address). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22509 - http://www.novell.com/linux/security/advisories/2006_61_opera.html - http://www.securityfocus.com/bid/20591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29632 - http://securitytracker.com/id?1017080 - http://www.kb.cert.org/vuls/id/484380 - http://www.vupen.com/english/advis
632 - http://securitytracker.com/id?1017080 - http://www.kb.cert.org/vuls/id/484380 - http://www.vupen.com/english/advisories/2006/4066 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=424 - http://www.opera.com/support/search/supsearch.dml?index=848 - http://secunia.com/advisories/22218
CVE ID: CVE-2006-4820 State: PUBLISHED Published: 2006-09-15T21:00:00 Last Updated: 2024-08-07T19:23:41.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in X.25 on HP-UX B.11.00, B.11.11, and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5747 - http://www.securityfocus.com/archive/1/446030/100/0/threaded - http://www.vupen.com/english/advisories/2006/3634 - http://www.securityfocus.com/archive/1/446030/100/0/threaded - http://www.securityfocus.com/bid/20029 -
ries/2006/3634 - http://www.securityfocus.com/archive/1/446030/100/0/threaded - http://www.securityfocus.com/bid/20029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28954 - http://securitytracker.com/id?1016857 - http://securityreason.com/securityalert/1595 - http://secunia.com/advisories/21928
CVE ID: CVE-2006-4821 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Userreview module before 1.19 2006/09/12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3603 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28931 - http://www.securityfocus.com/bid/20015 - http://drupal.org/node/83954 - http://secunia.com/advisories/21907
CVE ID: CVE-2006-4822 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) query or (2) page parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20013 - http://www.security-net.biz/adv/D13906a.txt - http://www.osvdb.org/28767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28939 - http://www.vupen.com/english/advisories/2006/3604 - http://secunia.com/advisories/21883
CVE ID: CVE-2006-4823 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in scripts/news_page.php in Reamday Enterprises Magic News Pro 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the script_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20014 - http://securityreason.com/securityalert/1592 - http://www.securityfocus.com/archive/1/446032/100/0/threaded - https://www.exploit-db.com/exploits/2363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28933
2/100/0/threaded - https://www.exploit-db.com/exploits/2363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28933 - http://secunia.com/advisories/21887 - http://www.vupen.com/english/advisories/2006/3602
CVE ID: CVE-2006-4824 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/activeutil.php in Quicksilver Forums (QSF) 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the set[include_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28901 - http://secunia.com/advisories/21892 - http://www.securityfocus.com/bid/19991 - http://www.quicksilverforums.com/index.php - http://www.vupen.com/english/ad
- http://www.securityfocus.com/bid/19991 - http://www.quicksilverforums.com/index.php - http://www.vupen.com/english/advisories/2006/3596
CVE ID: CVE-2006-4825 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in cl_files/index.php in SoftComplex PHP Event Calendar 1.5.1, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) ti, (2) bi, or (3) cbgi parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28906 - http://secunia.com/advisories/21895 - http://www.securityfocus.com/archive/1/445879/100/0/threaded - http://securityreason.com/securityalert/1582 - http://www.
ttp://www.securityfocus.com/archive/1/445879/100/0/threaded - http://securityreason.com/securityalert/1582 - http://www.securityfocus.com/bid/20001
CVE ID: CVE-2006-4826 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2361 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28918 - http://www.securityfocus.com/bid/20006 - http://www.vupen.com/english/advisories/2006/3629 - http://secunia.com/advisories/21920 - http://www.osvdb.org/28835
CVE ID: CVE-2006-4827 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Vmist Downstat 1.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the art parameter to (1) admin.php, (2) chart.php, (3) modes.php, or (4) stats.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3594 - https://www.exploit-db.com/exploits/2359 - http://www.securityfocus.com/bid/20007 - http://secunia.com/advisories/21914 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28916