Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
p://secunia.com/advisories/31531 - http://www.arkoon.fr/upload/alertes/37AK-2006-06-FR-1.1_FAST360_OPENSSL_ASN1.pdf - http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc - http://secunia.com/advisories/22165 - http://docs.info.apple.com/article.html?artnum=304829 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html - http://secunia.com/advisories/23794 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://secunia.com/advisories/22220 - http://secunia.com/advisories/23680 - http://openvpn.net/changelog.html - http://www.vmware.com/support/server/doc/releasenotes_server.html - https://issues.rpath.com/browse/RPL-1633 - http://secunia.com/adviso
e.com/support/server/doc/releasenotes_server.html - https://issues.rpath.com/browse/RPL-1633 - http://secunia.com/advisories/25889 - http://www.vupen.com/english/advisories/2006/4036 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10311 - http://www.vupen.com/english/advisories/2006/4019 - http://openbsd.org/errata.html#openssl2 - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://secunia.com/advisories/30124 - http://secunia.com/advisories/22626 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29230 - http://www.securityfocus.com/bid/22083 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:178 - http://secunia.com
//www.securityfocus.com/bid/22083 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:178 - http://secunia.com/advisories/23351 - http://www.vupen.com/english/advisories/2006/3869 - http://secunia.com/advisories/22671 - http://secunia.com/advisories/22544 - http://secunia.com/advisories/22298 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/22130 - http://secunia.com/advisories/31492 - http://www.vupen.com/english/advisories/2006/4329 - http://secunia.com/advisories/22284 - http://secunia.com/advisories/24930 - http://www.vupen.com/english/advisories/2006/4327 - http://www.redhat.com/support/errata/RHSA-2008-0629.html - http://se
http://www.vupen.com/english/advisories/2006/4327 - http://www.redhat.com/support/errata/RHSA-2008-0629.html - http://security.gentoo.org/glsa/glsa-200610-11.xml - http://issues.rpath.com/browse/RPL-613 - http://secunia.com/advisories/26329 - http://secunia.com/advisories/22260 - http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf - http://www.vupen.com/english/advisories/2007/0343 - http://www.vupen.com/english/advisories/2006/3860 - http://secunia.com/advisories/23280 - http://www.securityfocus.com/archive/1/447318/100/0/threaded - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://www.vmware.com/support/player/doc/releasenotes_player.html - htt
.com/service/cki/docDisplay.do?docId=c00967144 - http://www.vmware.com/support/player/doc/releasenotes_player.html - http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm - http://www.vupen.com/english/advisories/2006/4264 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://secunia.com/advisories/22193 - http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html - http://www.vupen.com/english/advisories/2008/2396 - http://secunia.com/advisories/23155 - http://secunia.com/advisories/22799 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200585-1 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946 - http:/
-66-200585-1 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946 - http://www.vupen.com/english/advisories/2006/4417 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://www.serv-u.com/releasenotes/ - http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html - http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html - http://marc.info/?l=bind-announce&m=116253119512445&w=2 - http://secunia.com/advisories/22094 - http://secunia.com/advisories/22186 - http://www.openssl.org/news/secadv_20060928.txt - http://kolab.org/security/kolab-vendor-notice-11.txt -
isories/22186 - http://www.openssl.org/news/secadv_20060928.txt - http://kolab.org/security/kolab-vendor-notice-11.txt - http://www.vupen.com/english/advisories/2007/2315 - http://secunia.com/advisories/22500 - http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - http://www.us-cert.gov/cas/techalerts/TA06-333A.html - http://www.securityfocus.com/archive/1/489739/100/0/threaded - http://secunia.com/advisories/22216 - http://www.vupen.com/english/advisories/2006/3820 - http://lists.vmware.com/pipermail/security-announce/2008/000008.html - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100 - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.h
com/service/cki/docDisplay.do?docId=c00805100 - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102747-1 - http://www.vupen.com/english/advisories/2008/0905/references - http://www.vupen.com/english/advisories/2007/1401 - http://www.securityfocus.com/bid/20247 - http://www.osvdb.org/29261 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc - http://www.vmware.com/security/advisories/VMSA-2008-0005.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 - http://www.securityfocus.com/a
html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 - http://www.securityfocus.com/archive/1/456546/100/200/threaded - http://www.securityfocus.com/archive/1/447393/100/0/threaded - http://www.vupen.com/english/advisories/2006/3936 - http://www.vupen.com/english/advisories/2006/4980 - http://secunia.com/advisories/22240 - http://secunia.com/advisories/22330 - http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://www.debian.org/security/2006/dsa-1185 - ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc - http://www.arkoon.fr/upload/alertes/41AK-2006-08
://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc - http://www.arkoon.fr/upload/alertes/41AK-2006-08-FR-1.1_SSL360_OPENSSL_ASN1.pdf - http://secunia.com/advisories/22207 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:177 - http://securitytracker.com/id?1017522 - http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html - http://www.vupen.com/english/advisories/2006/3902 - http://www.vupen.com/english/advisories/2007/2783 - http://secunia.com/advisories/22259 - http://secunia.com/advisories/22460 - http://secunia.com/advisories/22172 - http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html - http://
2460 - http://secunia.com/advisories/22172 - http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100 - http://www.securityfocus.com/bid/28276 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1 - http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml - http://secunia.com/advisories/24950
CVE ID: CVE-2006-2941 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T18:06:27.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers". Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3446 - http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html - http://www.securityfocus.com/bid/19831 - http://secunia.com/advisories/21837 - http://secunia.com/advisories/22639 - http://securitytracker.com/id?1016808 - http://secunia.com/
com/advisories/21837 - http://secunia.com/advisories/22639 - http://securitytracker.com/id?1016808 - http://secunia.com/advisories/21879 - http://www.ubuntu.com/usn/usn-345-1 - http://security.gentoo.org/glsa/glsa-200609-12.xml - http://svn.sourceforge.net/viewvc/mailman/trunk/mailman/Mailman/Utils.py?r1=7859&r2=7923 - http://www.novell.com/linux/security/advisories/2006_25_sr.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:165 - http://secunia.com/advisories/21792 - http://rhn.redhat.com/errata/RHSA-2006-0600.html - http://sourceforge.net/project/shownotes.php?group_id=103&release_id=444295 - http://secunia.com/advisories/21732 - https://oval.cisecurity.org/repository/sea
es.php?group_id=103&release_id=444295 - http://secunia.com/advisories/21732 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9912 - http://secunia.com/advisories/22011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28732 - http://secunia.com/advisories/22020
CVE ID: CVE-2006-2942 State: PUBLISHED Published: 2006-06-20T18:00:00 Last Updated: 2024-08-07T18:06:27.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: TWiki 4.0.0, 4.0.1, and 4.0.2 allows remote attackers to gain Twiki administrator privileges via a TWiki.TWikiRegistration form with a modified action attribute that references the Sandbox web instead of the user web, which can then be used to associate the user's login name with the WikiName of a member of the TWikiAdminGroup. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26623 - http://secunia.com/advisories/20596 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27336 - http://ww
org/26623 - http://secunia.com/advisories/20596 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27336 - http://www.vupen.com/english/advisories/2006/2415 - http://securitytracker.com/id?1016323 - http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4PrivilegeElevation - http://www.securityfocus.com/bid/18506 - http://archives.neohapsis.com/archives/vulnwatch/2006-q2/0032.html
CVE ID: CVE-2006-2943 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.281Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in CGI-RESCUE WebFORM 4.1 and earlier allows remote attackers to inject email headers, which facilitates sending spam messages. NOTE: the details for this issue are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20515 - http://www.securityfocus.com/bid/18434 - http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20060216124645 - http://www.vupen.com/english/advisories/2006/2234 - https://exchange.xforce.ibmcloud.com/
cgi/permalink/20060216124645 - http://www.vupen.com/english/advisories/2006/2234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27130 - http://jvn.jp/jp/JVN%2339570254/index.html
CVE ID: CVE-2006-2944 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in CGI-RESCUE FORM2MAIL 1.21 and earlier allows remote attackers to inject email headers, which facilitates sending spam messages. NOTE: the details for this issue are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20515 - http://www.securityfocus.com/bid/18434 - http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20060216124645 - http://www.vupen.com/english/advisories/2006/2234 - https://exchange.xforce.ibmcloud.c
og.cgi/permalink/20060216124645 - http://www.vupen.com/english/advisories/2006/2234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27130 - http://jvn.jp/jp/JVN%2339570254/index.html
CVE ID: CVE-2006-2945 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the user profile change functionality in DokuWiki, when Access Control Lists are enabled, allows remote authenticated users to read unauthorized files via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2172 - http://secunia.com/advisories/20478 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27081 - http://bugs.splitbrain.org/?do=details&id=825
CVE ID: CVE-2006-2946 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dmx Forum 2.1a stores _includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2154 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0799.html - http://secunia.com/advisories/20450
CVE ID: CVE-2006-2947 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.php with a modified membre parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2154 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0799.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26949 - http://www.securityfocus.com/bid/18286 - http://secunia.com/advisories/20450
CVE ID: CVE-2006-2948 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: A-CART 2.0 stores the acart2_0.mdb file under the web document root with insufficient access control, which allows remote attackers to obtain username and password information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1005171 - http://www.securityfocus.com/archive/1/436257/100/0/threaded - http://www.securiteam.com/windowsntfocus/5JP081F8AY.html - http://www.securityfocus.com/bid/5597 - http://www.vupen.com/english/advisories/2006/2207 - http://secunia.com/advisories/20508
CVE ID: CVE-2006-2949 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the do parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18297 - http://secunia.com/advisories/20492 - http://www.vupen.com/english/advisories/2006/2190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26994 - http://www.securityfocus.com/archive/1/436286/100/0/threaded
CVE ID: CVE-2006-2950 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) header.php, (2) contact.php, or (3) forum_extender.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26289 - http://secunia.com/advisories/20523 - http://www.osvdb.org/26287 - http://securityreason.com/securityalert/1076 - http://www.osvdb.org/26288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27124 -
ason.com/securityalert/1076 - http://www.osvdb.org/26288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27124 - http://www.securityfocus.com/archive/1/436442/100/0/threaded - http://www.vupen.com/english/advisories/2006/2233 - http://www.acid-root.new.fr/advisories/npds510.txt
CVE ID: CVE-2006-2951 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Net Portal Dynamic System (NPDS) 5.10 and earlier allow remote attackers to inject arbitrary web script and HTML via the (1) Titlesitename or (2) sitename parameter to (a) header.php, (3) nuke_url parameter to (b) meta/meta.php, (4) forum parameter to (c) viewforum.php, (5) post_id, (6) forum, (7) topic, or (8) arbre parameter to (d) editpost.php, or (9) uname or (10) email parameter to (e) user.php. Additional Analyst Notes: - CVE Program Container: References: - http://w
uname or (10) email parameter to (e) user.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26294 - http://secunia.com/advisories/20523 - http://www.osvdb.org/26295 - http://securityreason.com/securityalert/1076 - http://www.securityfocus.com/bid/18383 - http://www.osvdb.org/26292 - http://www.osvdb.org/26296 - http://www.osvdb.org/26293 - http://www.securityfocus.com/archive/1/436442/100/0/threaded - http://www.vupen.com/english/advisories/2006/2233 - http://www.acid-root.new.fr/advisories/npds510.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/27123
CVE ID: CVE-2006-2952 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the (1) Default_Theme parameter to header.php or (2) ModPath parameter to modules/cluster-paradise/cluster-E.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20523 - http://securityreason.com/securityalert/1076 - http://www.securityfocus.com/bid/18383 - http://www.osvdb.org/26291 - htt
http://securityreason.com/securityalert/1076 - http://www.securityfocus.com/bid/18383 - http://www.osvdb.org/26291 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27121 - http://www.securityfocus.com/archive/1/436442/100/0/threaded - http://www.vupen.com/english/advisories/2006/2233 - http://www.acid-root.new.fr/advisories/npds510.txt - http://www.osvdb.org/26290
CVE ID: CVE-2006-2953 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in default.asp in OfficeFlow 2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the sqlType parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/officeflow-26-vuln.html - http://secunia.com/advisories/20545 - http://www.securityfocus.com/bid/18367 - http://securitytracker.com/id?1016255 - http://www.vupen.com/english/advisories/2006/2246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2702
?1016255 - http://www.vupen.com/english/advisories/2006/2246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27022
CVE ID: CVE-2006-2954 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in files.asp in OfficeFlow 2.6 and earlier allows remote attackers to execute arbitrary SQL commands via the Project parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/officeflow-26-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27023 - http://secunia.com/advisories/20545 - http://www.securityfocus.com/bid/18367 - http://securitytracker.com/id?1016255 - http://www.vupen.com/english/advisories/2006/2246
CVE ID: CVE-2006-2955 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) New Category (newcategory) or (2) apage parameter to (a) edtalbum.asp, or the (3) cat or (4) albumid parameter to (b) album.asp. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/kaphotoservice-75-vuln.html - http://www.osvdb.org/26276 - http://securitytracker.com/id?1016253 - http://www.securityfocus.com/bid/18379 - h
n.html - http://www.osvdb.org/26276 - http://securitytracker.com/id?1016253 - http://www.securityfocus.com/bid/18379 - http://www.vupen.com/english/advisories/2006/2251 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27073 - http://secunia.com/advisories/20521 - http://www.osvdb.org/26275
CVE ID: CVE-2006-2956 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in i.List 1.5 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) searchword parameter to search.php or (2) siteurl parameter to add.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20547 - http://securitytracker.com/id?1016274 - http://www.vupen.com/english/advisories/2006/2252 - http://www.securityfocus.com/bid/18355 - http://www.majorsecurity.de/advisory/major_rls10.txt
CVE ID: CVE-2006-2957 State: PUBLISHED Published: 2006-06-12T20:00:00Z Last Updated: 2024-09-16T17:18:43.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in i.List 1.5 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the banurl parameter to add.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20547
CVE ID: CVE-2006-2958 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in FilZip 3.05 allows remote attackers to write arbitrary files via a .. (dot dot) in a (1) .rar, (2) .tar, (3) .jar, or (4) .gz file. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18375 - http://www.vupen.com/english/advisories/2006/2255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27027 - http://secunia.com/advisories/20543
CVE ID: CVE-2006-2959 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc_header.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the %strCookieURL%.GROUP parameter in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1075 - http://www.securityfocus.com/bid/18362 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27080 - http://forum.snitz.com/forum/topic.asp?TOPIC_ID=62049 - http://www.securityfocus.com/archive/1/436702/100/0/threaded - http://se
orum.snitz.com/forum/topic.asp?TOPIC_ID=62049 - http://www.securityfocus.com/archive/1/436702/100/0/threaded - http://securitytracker.com/id?1016267 - http://www.kapda.ir/advisory-343.html