Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
gram Container: References: - http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html - http://www.securityfocus.com/bid/20588 - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.vupen.com/english/advisories/2006/4065 - http://secunia.com/advisories/22396 - http://securitytracker.com/id?1017077 - http://www.us-cert.gov/cas/techalerts/TA06-291A.html
CVE ID: CVE-2006-5368 State: PUBLISHED Published: 2006-10-18T01:00:00 Last Updated: 2024-08-07T19:48:30.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Exchange component in Oracle E-Business Suite 6.2.4 has unknown impact and remote attack vectors, aka Vuln# APPS01. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html - http://www.securityfocus.com/bid/20588 - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html - http://www.securityfocus.com/archive/1/449711/100/0/threaded -
com/technetwork/topics/security/cpuoct2006-095368.html - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.vupen.com/english/advisories/2006/4065 - http://secunia.com/advisories/22396 - http://securitytracker.com/id?1017077 - http://www.us-cert.gov/cas/techalerts/TA06-291A.html
CVE ID: CVE-2006-5369 State: PUBLISHED Published: 2006-10-18T01:00:00 Last Updated: 2024-08-07T19:48:30.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Application Object Library in Oracle E-Business Suite 11.5.10CU2 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS02. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html - http://www.securityfocus.com/bid/20588 - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html - http://www.securityfocus.com/archive
readed - http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.vupen.com/english/advisories/2006/4065 - http://secunia.com/advisories/22396 - http://securitytracker.com/id?1017077 - http://www.us-cert.gov/cas/techalerts/TA06-291A.html
CVE ID: CVE-2006-5370 State: PUBLISHED Published: 2006-10-18T01:00:00 Last Updated: 2024-08-07T19:48:30.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS06 for Oracle CRM Gateway for Mobile Devices and (2) APPS08 for Oracle iStore. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html - http://www.securityfocus.com/bid/20588 - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuoct2
http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.vupen.com/english/advisories/2006/4065 - http://secunia.com/advisories/22396 - http://securitytracker.com/id?1017077 - http://www.us-cert.gov/cas/techalerts/TA06-291A.html
CVE ID: CVE-2006-5371 State: PUBLISHED Published: 2006-10-18T01:00:00 Last Updated: 2024-08-07T19:48:30.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Email Center component in Oracle E-Business Suite 11.5.9 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS07. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html - http://www.securityfocus.com/bid/20588 - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html - http://www.securityfocus.com/archive/1/44971
CVE ID: CVE-2006-5372 State: PUBLISHED Published: 2006-10-18T01:00:00 Last Updated: 2024-08-07T19:48:30.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS11 for Oracle Universal Work Queue and (2) APPS12 for Oracle Application Object Library. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html - http://www.securityfocus.com/bid/20588 - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.oracle.com/technetwork
tyfocus.com/bid/20588 - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.vupen.com/english/advisories/2006/4065 - http://secunia.com/advisories/22396 - http://securitytracker.com/id?1017077 - http://www.us-cert.gov/cas/techalerts/TA06-291A.html
CVE ID: CVE-2006-5373 State: PUBLISHED Published: 2006-10-18T01:00:00 Last Updated: 2024-08-07T19:48:30.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Install Base component in Oracle E-Business Suite 11.5.10CU1 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS13. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html - http://www.securityfocus.com/bid/20588 - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html - http://www.securityfocus.com/archive/1/4
ed - http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.vupen.com/english/advisories/2006/4065 - http://secunia.com/advisories/22396 - http://securitytracker.com/id?1017077 - http://www.us-cert.gov/cas/techalerts/TA06-291A.html
CVE ID: CVE-2006-5374 State: PUBLISHED Published: 2006-10-18T01:00:00 Last Updated: 2024-08-07T19:48:30.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Pharmaceutical Applications 4.5.1 has unknown impact and remote authenticated attack vectors, aka Vuln# PHAR01. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html - http://www.securityfocus.com/bid/20588 - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http
technetwork/topics/security/cpuoct2006-095368.html - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.vupen.com/english/advisories/2006/4065 - http://secunia.com/advisories/22396 - http://securitytracker.com/id?1017077 - http://www.us-cert.gov/cas/techalerts/TA06-291A.html
CVE ID: CVE-2006-5375 State: PUBLISHED Published: 2006-10-18T01:00:00 Last Updated: 2024-08-07T19:48:30.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.46 GA, 8.47 GA, 8.48 GA, 8.46.15, 8.47.09, and 8.48.03 have unknown impact and remote attack vectors, aka Vuln# (1) PSE01, (2) PSE02, and (3) PSE03. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html - http://www.securityfocus.com/bid/20588 - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.oracle.com/technetwork/topics/secu
bid/20588 - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.vupen.com/english/advisories/2006/4065 - http://secunia.com/advisories/22396 - http://securitytracker.com/id?1017077 - http://www.us-cert.gov/cas/techalerts/TA06-291A.html
CVE ID: CVE-2006-5376 State: PUBLISHED Published: 2006-10-18T01:00:00 Last Updated: 2024-08-07T19:48:30.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.22 GA, 8.46 GA, 8.47 GA, 8.48 GA, 8.22.11, 8.46.15, 8.47.09, and 8.48.03 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) PSE04, (2) PSE06, (3) PSE07, and (4) PSE08. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html - http://www.securityfocus.com/bid/20588 - http://www.securityfocus.com/archive/1/449711/100/0/threaded - ht
t_2006.html - http://www.securityfocus.com/bid/20588 - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.vupen.com/english/advisories/2006/4065 - http://secunia.com/advisories/22396 - http://securitytracker.com/id?1017077 - http://www.us-cert.gov/cas/techalerts/TA06-291A.html
CVE ID: CVE-2006-5377 State: PUBLISHED Published: 2006-10-18T01:00:00 Last Updated: 2024-08-07T19:48:30.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PeopleSoft component in Oracle PeopleSoft Enterprise 8.80 GA, 8.90 GA, 8.8 Bundle 11, and 8.9 Bundle 4 has unknown impact and remote authenticated attack vectors, aka Vuln# PSE05. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html - http://www.securityfocus.com/bid/20588 - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html - http:/
CVE ID: CVE-2006-5378 State: PUBLISHED Published: 2006-10-18T01:00:00 Last Updated: 2024-08-07T19:48:30.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23_O2, 8.95.P1, and 8.96.D1 has unknown impact and remote authenticated attack vectors, aka Vuln# JDE01. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html - http://www.securityfocus.com/bid/20588 - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html - http://www.securityfocus.com
100/0/threaded - http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html - http://www.securityfocus.com/archive/1/449711/100/0/threaded - http://www.vupen.com/english/advisories/2006/4065 - http://secunia.com/advisories/22396 - http://securitytracker.com/id?1017077 - http://www.us-cert.gov/cas/techalerts/TA06-291A.html
CVE ID: CVE-2006-5379 State: PUBLISHED Published: 2006-10-18T10:00:00 Last Updated: 2024-08-07T19:48:30.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4053 - http://secunia.com/advisories/22730 - http://download2.rapid7.com/r7-0025/nv_exploit.c - http
ish/advisories/2006/4053 - http://secunia.com/advisories/22730 - http://download2.rapid7.com/r7-0025/nv_exploit.c - http://security.gentoo.org/glsa/glsa-200611-03.xml - http://www.securityfocus.com/bid/20559 - http://securityreason.com/securityalert/1742 - http://www.ubuntu.com/usn/usn-377-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102693-1 - http://www.rapid7.com/advisories/R7-0025.jsp - http://secunia.com/advisories/22419 - http://securitytracker.com/id?1017072 - http://www.kb.cert.org/vuls/id/147252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29622 - http://www.vupen.com/english/advisories/2006/4328 - http://secunia.com/advisories/22676 - http://nvidia.custhel
/29622 - http://www.vupen.com/english/advisories/2006/4328 - http://secunia.com/advisories/22676 - http://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=1971 - http://www.securityfocus.com/archive/1/451329/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2007:007 - http://secunia.com/advisories/23678 - http://download2.rapid7.com/r7-0025/ - http://www.securityfocus.com/archive/1/448860/100/0/threaded - http://secunia.com/advisories/22764
CVE ID: CVE-2006-5380 State: PUBLISHED Published: 2006-10-18T10:00:00 Last Updated: 2024-08-07T19:48:30.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote file inclusion vulnerability in Contenido CMS allows remote attackers to execute arbitrary PHP code via a URL in the contenido_path parameter to (1) cms/dbfs.php or (2) cms/front_content.php. NOTE: CVE disputes this issue for version 4.6.15, because $contenido_path is set to a static value Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/448549/100/0/threaded - http://www.attrition.org/pipermail/vim/2006-October/001084.html - https://exchange.xforce.ibmcloud.com/vul
/0/threaded - http://www.attrition.org/pipermail/vim/2006-October/001084.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/29549 - http://securityreason.com/securityalert/1739
CVE ID: CVE-2006-5381 State: PUBLISHED Published: 2006-10-18T10:00:00 Last Updated: 2024-08-07T19:48:30.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database credentials and other information via a direct request to (1) db_msql.inc, (2) db_mssql.inc, (3) db_mysqli.inc, (4) db_oci8.inc, (5) db_odbc.inc, (6) db_oracle.inc, (7) db_pgsql.inc, or (8) db_sybase.inc in the conlib/ directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/448563/100/0/threaded - http://securityreason.com/securityal
ainer: References: - http://www.securityfocus.com/archive/1/448563/100/0/threaded - http://securityreason.com/securityalert/1738
CVE ID: CVE-2006-5382 State: PUBLISHED Published: 2006-10-25T23:00:00 Last Updated: 2024-08-07T19:48:30.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: 3Com Switch SS3 4400 switches, firmware 5.11, 6.00 and 6.10 and earlier, allow remote attackers to read the SNMP Read-Write Community string and conduct unauthorized actions via unspecified "normally restricted management packets on the device" that cause the community string to be returned. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22818 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29779 - http://www.vupen.com/english/advisories/2006/4184 - http://www.3com.com/sec
.xforce.ibmcloud.com/vulnerabilities/29779 - http://www.vupen.com/english/advisories/2006/4184 - http://www.3com.com/securityalert/alerts/3COM-06-004.html - http://securitytracker.com/id?1017128 - http://www.securityfocus.com/bid/20736
CVE ID: CVE-2006-5383 State: PUBLISHED Published: 2006-10-18T19:00:00 Last Updated: 2024-08-07T19:48:30.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29561 - https://www.exploit-db.com/exploits/2567 - http://www.vupen.com/english/advisories/2006/4049 - http://secunia.com/advisories/22389 - http://www.securityfocus.com/bid/20545
CVE ID: CVE-2006-5384 State: PUBLISHED Published: 2006-10-18T19:00:00 Last Updated: 2024-08-07T19:48:30.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modification/SendAlertEmail.php in CDS Software Consortium CDS Agenda 4.2.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AGE parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29519 - https://www.exploit-db.com/exploits/2540 - http://www.vupen.com/english/advisories/2006/4048 - http://www.securityfocus.com/bid/20508 - http://secunia.com/advisories/22416
CVE ID: CVE-2006-5385 State: PUBLISHED Published: 2006-10-18T19:00:00 Last Updated: 2024-08-07T19:48:30.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/admin_spam.php in the SpamOborona 1.0b and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20515 - https://www.exploit-db.com/exploits/2547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29568 - http://secunia.com/advisories/22438 - http://securityreason.com/securityalert/1741 - http://www.securityfocus.c
/29568 - http://secunia.com/advisories/22438 - http://securityreason.com/securityalert/1741 - http://www.securityfocus.com/archive/1/448633/100/0/threaded - http://www.vupen.com/english/advisories/2006/4039
CVE ID: CVE-2006-5386 State: PUBLISHED Published: 2006-10-18T19:00:00 Last Updated: 2024-08-07T19:48:30.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in process.php in NuralStorm Webmail 0.98b and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DEFAULT_SKIN parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29553 - http://www.vupen.com/english/advisories/2006/4044 - https://www.exploit-db.com/exploits/2561 - http://secunia.com/advisories/22403
CVE ID: CVE-2006-5387 State: PUBLISHED Published: 2006-10-18T19:00:00 Last Updated: 2024-08-07T19:48:30.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272 and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20315 - http://securityreason.com/securityalert/1740 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29520 - http://secunia.com/advisories/22414 - https://www.exploit-db.com/exploits/2538 - http://www.vupen.c
nerabilities/29520 - http://secunia.com/advisories/22414 - https://www.exploit-db.com/exploits/2538 - http://www.vupen.com/english/advisories/2006/4038 - http://www.securityfocus.com/archive/1/448581/100/0/threaded
CVE ID: CVE-2006-5388 State: PUBLISHED Published: 2006-10-18T19:00:00 Last Updated: 2024-08-07T19:48:30.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in WebSPELL 4.01.01 and earlier allows remote attackers to execute arbitrary SQL commands via the getsquad parameter, a different vector than CVE-2006-4783. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2568 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29563 - http://www.securityfocus.com/bid/20540
CVE ID: CVE-2006-5389 State: PUBLISHED Published: 2006-10-18T19:00:00 Last Updated: 2024-08-07T19:48:30.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: tools/tellhim.php in PHP-Wyana allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1743 - http://www.securityfocus.com/archive/1/448789/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29601
CVE ID: CVE-2006-5390 State: PUBLISHED Published: 2006-10-18T19:00:00 Last Updated: 2024-08-07T19:48:30.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions_mod_user.php in the ACP User Registration (MMW) 1.00 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpbb.com/phpBB/viewtopic.php?p=2504370#2504370 - https://www.exploit-db.com/exploits/2551 - http://secunia.com/advisories/22436 - http://www.osvdb.org/29734 - http://www.securityfocus.com/bid/20558 - https://exchange.xforce.i
a.com/advisories/22436 - http://www.osvdb.org/29734 - http://www.securityfocus.com/bid/20558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29571
CVE ID: CVE-2006-5391 State: PUBLISHED Published: 2006-10-18T19:00:00 Last Updated: 2024-08-07T19:48:30.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xfire 1.64 and earlier allows remote attackers to cause a denial of service (client application crash) via a long string to UDP port 25777. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2571 - http://www.securityfocus.com/bid/20548 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29602
CVE ID: CVE-2006-5392 State: PUBLISHED Published: 2006-10-18T19:00:00 Last Updated: 2024-08-07T19:48:30.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in OpenDock FullCore 4.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) sw/index_sw.php; (2) cart.php, (3) lib_cart.php, (4) lib_read_cart.php, (5) lib_sys_cart.php, and (6) txt_info_cart.php in sw/lib_cart/; (7) comment.php, (8) find_comment.php, and (9) lib_comment.php in sw/lib_comment/; (10) sw/lib_find/find.php; and other unspecified PHP scripts. Additional Analyst Notes: - CVE Program Container: References
) sw/lib_find/find.php; and other unspecified PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29913 - http://www.osvdb.org/29911 - http://www.osvdb.org/29909 - http://www.osvdb.org/29908 - http://secunia.com/advisories/22410 - http://www.osvdb.org/29910 - http://www.osvdb.org/29915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29578 - http://www.osvdb.org/29914 - https://www.exploit-db.com/exploits/2570 - http://www.osvdb.org/29907 - http://www.osvdb.org/29912 - http://www.vupen.com/english/advisories/2006/4052 - http://www.osvdb.org/29906 - http://www.securityfocus.com/bid/20573
CVE ID: CVE-2006-5393 State: PUBLISHED Published: 2006-10-18T19:00:00.000Z Last Updated: 2025-04-03T15:41:56.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local users to read certain memory pages that were written during another user's SSL VPN session. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.cisco.com/en/US/products/products_security_advisory09186a0080754f34.shtml - http://www.securityfocus.com/bid/20410 - http://securitytracker.com/id?1017018