Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-5800 State: PUBLISHED Published: 2006-11-08T20:00:00 Last Updated: 2024-08-07T20:04:55.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in default.asp in xenis.creator CMS allows remote attackers to inject arbitrary web script or HTML via the nav parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30019
CVE ID: CVE-2006-5801 State: PUBLISHED Published: 2006-11-08T20:00:00 Last Updated: 2024-08-07T20:04:55.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: The owserver module in owfs and owhttpd 2.5p5 and earlier does not properly check the path type, which allows attackers to cause a denial of service (application crash) related to use of the path in owshell. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30080 - http://www.vupen.com/english/advisories/2006/4381 - http://www.securityfocus.com/bid/20953 - http://secunia.com/advisories/22700 - http://sourceforge.net/project/shownotes.php?release_id=461204
CVE ID: CVE-2006-5802 State: PUBLISHED Published: 2006-11-08T20:00:00 Last Updated: 2024-08-07T20:04:55.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in message_details.php in The Web Drivers Simple Forum, dated 20060318, allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22706 - http://www.securityfocus.com/bid/20937 - http://www.vupen.com/english/advisories/2006/4351 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30020 - https://www.exploit-db.com/exploits/2722
CVE ID: CVE-2006-5803 State: PUBLISHED Published: 2006-11-08T20:00:00 Last Updated: 2024-08-07T20:04:55.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/mx_smartor/album.php in the mxBB Smartor Album module 1.02 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20932 - https://www.exploit-db.com/exploits/2723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30015
CVE ID: CVE-2006-5804 State: PUBLISHED Published: 2006-11-08T20:00:00 Last Updated: 2024-08-07T20:04:55.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/30230 - http://www.securityfocus.com/bid/20902 - http://www.securityfocus.com/archive/1/450729/100/0/threaded - http://securityreason.com/securityalert/1833 - http://www.vupen.com/english/advisories/2006/4385 - http://secunia.com/advisories/22756
CVE ID: CVE-2006-5805 State: PUBLISHED Published: 2006-11-08T22:00:00 Last Updated: 2024-08-07T20:04:55.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 7 allows remote attackers to cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/invalidcert.htm with the target site as an argument, which displays the site's URL in the address bar but causes Internet Explorer to report that the certificate is invalid. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017165 - http://www.securityfocus.com/archive/1/450722/100/0/threaded - http://ingehenriksen.blogspot.c
ytracker.com/id?1017165 - http://www.securityfocus.com/archive/1/450722/100/0/threaded - http://ingehenriksen.blogspot.com/2006/11/ie7-website-security-certificate.html
CVE ID: CVE-2006-5806 State: PUBLISHED Published: 2006-11-08T22:00:00 Last Updated: 2024-08-07T20:04:55.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does not restrict the user from saving files outside of the vault, which is not cleared after the VPN connection terminates and allows local users to read unencrypted data. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017195 - https://exchange.xforce.ibmcloud.com/vu
: - CVE Program Container: References: - http://securitytracker.com/id?1017195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30129 - http://secunia.com/advisories/22747 - http://www.osvdb.org/30306 - http://www.cisco.com/warp/public/707/cisco-sa-20061108-csd.shtml - http://www.vupen.com/english/advisories/2006/4409 - http://www.securityfocus.com/bid/20964
CVE ID: CVE-2006-5807 State: PUBLISHED Published: 2006-11-08T22:00:00 Last Updated: 2024-08-07T20:04:55.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Desktop (CSD) before 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications that switch to the default desktop, aka "System Policy Evasion". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30130 - http://securitytracker.com/id?1017195 - http://secunia.com/advisories/22747 - http://www.osvdb.org/30307 - http://www.cisco.com/warp/public/707/cisco-sa-20061108-csd.shtml - http://www.vupen.com/englis
p://www.osvdb.org/30307 - http://www.cisco.com/warp/public/707/cisco-sa-20061108-csd.shtml - http://www.vupen.com/english/advisories/2006/4409 - http://www.securityfocus.com/bid/20964
CVE ID: CVE-2006-5808 State: PUBLISHED Published: 2006-11-08T22:00:00 Last Updated: 2024-08-07T20:04:55.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation of Cisco Secure Desktop (CSD) before 3.1.1.45 uses insecure default permissions (all users full control) for the CSD directory and its parent directory, which allow local users to gain privileges by replacing CSD executables, aka "Local Privilege Escalation". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30128 - http://securitytracker.com/id?1017195 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=442 - http://secunia
curitytracker.com/id?1017195 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=442 - http://secunia.com/advisories/22747 - http://www.cisco.com/warp/public/707/cisco-sa-20061108-csd.shtml - http://www.vupen.com/english/advisories/2006/4409 - http://www.osvdb.org/30308 - http://www.securityfocus.com/bid/20964
CVE ID: CVE-2006-5809 State: PUBLISHED Published: 2006-11-08T23:00:00 Last Updated: 2024-08-07T20:04:55.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Jonathon J. Freeman OvBB before 0.13a have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ovbb.org/release.php?id=4 - http://www.vupen.com/english/advisories/2006/4257
CVE ID: CVE-2006-5810 State: PUBLISHED Published: 2006-11-08T23:00:00Z Last Updated: 2024-09-16T18:55:48.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules/wfdownloads/newlist.php in XOOPS 1.0 allows remote attackers to inject arbitrary web script or HTML via the newdownloadshowdays parameter. Additional Analyst Notes: - CVE Program Container: References: - http://worldphantom.org/foro/index.php?PHPSESS=475e274a8eeb5ffa159e890b2a9cae64&topic=417.new - http://www.securityfocus.com/bid/20927
CVE ID: CVE-2006-5811 State: PUBLISHED Published: 2006-11-08T23:00:00 Last Updated: 2024-08-07T20:04:55.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with register_globals enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[srcdir] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2727 - http://www.securityfocus.com/archive/1/450698/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30036 - http://advisories.echo.or.id/adv/adv60-theday-2006.txt - http://www.vupen.com/engl
.ibmcloud.com/vulnerabilities/30036 - http://advisories.echo.or.id/adv/adv60-theday-2006.txt - http://www.vupen.com/english/advisories/2006/4382 - http://securityreason.com/securityalert/1844 - http://secunia.com/advisories/22695
CVE ID: CVE-2006-5812 State: PUBLISHED Published: 2006-11-08T23:00:00 Last Updated: 2024-08-07T20:04:55.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Kerio MailServer allows attackers to cause a denial of service, as demonstrated by vd_kms4.pm, a "Kerio MailServer DoS." NOTE: As of 20061108, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://gleg.net/vulndisco_meta.shtml - http://secunia.com/advisories/22861 - http://securitytracker.com/id?1017171 - https://exchange.xfor
lndisco_meta.shtml - http://secunia.com/advisories/22861 - http://securitytracker.com/id?1017171 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30145
CVE ID: CVE-2006-5813 State: PUBLISHED Published: 2006-11-08T23:00:00 Last Updated: 2024-08-07T20:04:55.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Novell eDirectory 8.8 allows attackers to cause a denial of service, as demonstrated by vd_novell3.pm, a "Novell eDirectory 8.8 DoS." NOTE: As of 20061108, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://gleg.net/vulndisco_meta.shtml - http://securitytracker.com/id?1017169 - https://exchange.xforce.ibmcloud.com/vulnerabi
//gleg.net/vulndisco_meta.shtml - http://securitytracker.com/id?1017169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30149
CVE ID: CVE-2006-5814 State: PUBLISHED Published: 2006-11-08T23:00:00 Last Updated: 2024-08-07T20:04:55.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Novell eDirectory allows remote attackers to execute arbitrary code, as demonstrated by vd_novell.pm, a "Novell eDirectory remote exploit." NOTE: As of 20061108, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://gleg.net/vulndisco_meta.shtml - http://securitytracker.com/id?1017169 - https://exchange.xforce.ibmcloud.com/vul
http://gleg.net/vulndisco_meta.shtml - http://securitytracker.com/id?1017169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30150
CVE ID: CVE-2006-5815 State: PUBLISHED Published: 2006-11-08T23:00:00 Last Updated: 2024-08-07T20:04:55.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably authenticated, to cause a denial of service and execute arbitrary code, as demonstrated by vd_proftpd.pm, a "ProFTPD remote exploit." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4451 - http://gleg.net/vulndisco_meta.shtml - http://www.debian.org/security/2006/dsa-1222 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:217 - http://secuni
/www.debian.org/security/2006/dsa-1222 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:217 - http://secunia.com/advisories/23207 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.502491 - http://www.trustix.org/errata/2006/0066/ - http://www.securityfocus.com/archive/1/452760/100/200/threaded - http://securitytracker.com/id?1017167 - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.035-proftpd.html - http://secunia.com/advisories/23174 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:217-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30147 - http://www.trustix.org/errata/2006/0070 - http://secunia.com/ad
s://exchange.xforce.ibmcloud.com/vulnerabilities/30147 - http://www.trustix.org/errata/2006/0070 - http://secunia.com/advisories/23069 - http://secunia.com/advisories/23000 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820 - http://secunia.com/advisories/22821 - http://secunia.com/advisories/23184 - http://secunia.com/advisories/23125 - http://www.securityfocus.com/bid/20992 - http://bugs.proftpd.org/show_bug.cgi?id=2858 - http://secunia.com/advisories/23179 - http://www.gentoo.org/security/en/glsa/glsa-200611-26.xml - http://secunia.com/advisories/22803
CVE ID: CVE-2006-5816 State: PUBLISHED Published: 2006-11-08T23:00:00 Last Updated: 2024-08-07T20:04:55.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko Business Card Web Builder (BCWB) 2.5 allow remote attackers to execute arbitrary PHP code via a URL in the root_path_admin parameter to (1) /include/startup.inc.php, (2) dcontent/default.css.php, or (3) system/default.css.php, different vectors than CVE-2006-4946. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29905 - http://www.securityfocus.com/archive/1/450069/100/100/threaded - http://s
ge.xforce.ibmcloud.com/vulnerabilities/29905 - http://www.securityfocus.com/archive/1/450069/100/100/threaded - http://securityreason.com/securityalert/1836
CVE ID: CVE-2006-5817 State: PUBLISHED Published: 2006-11-08T23:00:00 Last Updated: 2024-08-07T20:04:55.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: prl_dhcpd in Parallels Desktop for Mac Build 1940 uses insecure permissions (0666) for /Library/Parallels/.dhcpd_configuration, which allows local users to modify DHCP configuration. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22634 - http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0582.html
CVE ID: CVE-2006-5818 State: PUBLISHED Published: 2006-11-08T23:00:00 Last Updated: 2024-08-07T20:04:55.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in tunekrnl in IBM Lotus Domino 6.x before 6.5.5 FP2 and 7.x before 7.0.2 allow local users to gain privileges and execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30151 - http://secunia.com/advisories/22724 - http://securitytracker.com/id?1017198 - http://www.securityfocus.com/bid/20967 - http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21249173 - http://www.vupen.com/english/adv
focus.com/bid/20967 - http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21249173 - http://www.vupen.com/english/advisories/2006/4411 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=440
CVE ID: CVE-2006-5819 State: PUBLISHED Published: 2006-11-18T00:00:00 Last Updated: 2024-08-07T20:04:55.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verity Ultraseek before 5.7 allows remote attackers to use the server as a proxy for web attacks and host scanning via a direct request to the highlight/index.html script. Additional Analyst Notes: - CVE Program Container: References: - http://www.ultraseek.com/support/docs/RELNOTES.txt - http://www.osvdb.org/22892 - http://www.securityfocus.com/bid/21120 - http://www.osvdb.org/30286 - http://www.kb.cert.org/vuls/id/559616 - http://www.securityfocus.com/archive/1/451847/100/0/threaded - https://exchange.xforce.ibmcloud.com/vul
vuls/id/559616 - http://www.securityfocus.com/archive/1/451847/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30311 - http://securitytracker.com/id?1017235 - http://www.zerodayinitiative.com/advisories/ZDI-06-042.html
CVE ID: CVE-2006-5820 State: PUBLISHED Published: 2007-04-02T22:00:00 Last Updated: 2024-08-07T20:04:55.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an arbitrary function pointer, which allows remote attackers to execute arbitrary code via a modified pointer value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/23224 - http://www.kb.cert.org/vuls/id/478225 - http://secunia.com/advisories/24714 - http://www.vupen.com/english/advisories/2007/1184 - http://securityreason.com/securityalert/2513 - https
isories/24714 - http://www.vupen.com/english/advisories/2007/1184 - http://securityreason.com/securityalert/2513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33347 - http://osvdb.org/34318 - http://www.tippingpoint.com/security/advisories/TSRT-07-03.html - http://www.securityfocus.com/archive/1/464313/100/0/threaded
CVE ID: CVE-2006-5821 State: PUBLISHED Published: 2006-11-10T23:00:00 Last Updated: 2024-08-07T20:04:55.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture (IMA) service (ImaSrv.exe) with invalid size values that trigger the overflow during decryption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/451337/100/100/threaded - http://www.zerodayinitiative.com/advisori
References: - http://www.securityfocus.com/archive/1/451337/100/100/threaded - http://www.zerodayinitiative.com/advisories/ZDI-06-038.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30148 - http://securitytracker.com/id?1017205 - http://support.citrix.com/article/CTX111186 - http://www.securityfocus.com/bid/20986 - http://secunia.com/advisories/22802 - http://www.vupen.com/english/advisories/2006/4429
CVE ID: CVE-2006-5822 State: PUBLISHED Published: 2006-12-14T20:00:00 Last Updated: 2024-08-07T20:04:55.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 allows remote attackers to execute arbitrary code via a long CONNECT_OPTIONS request, a different issue than CVE-2006-6222. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-06-050.html - http://www.securityfocus.com/archive/1/454314/100/0/threaded - http://secunia.com/advisories/23368 - https://exchange.xf
http://www.securityfocus.com/archive/1/454314/100/0/threaded - http://secunia.com/advisories/23368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30883 - http://securitytracker.com/id?1017379 - http://www.symantec.com/avcenter/security/Content/2006.12.13a.html - http://www.securityfocus.com/bid/21565 - http://www.kb.cert.org/vuls/id/650432 - http://www.vupen.com/english/advisories/2006/4999
CVE ID: CVE-2006-5823 State: PUBLISHED Published: 2006-11-09T11:00:00 Last Updated: 2024-08-07T20:04:55.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: The zlib_inflate function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via a malformed filesystem that uses zlib compression that triggers memory corruption, as demonstrated using cramfs. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2007-0436.html - http://secunia.com/advisories/24098 - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - http://secunia.com/advisories/24259 - http://rhn.redhat.com/errata/RHSA-2007-0014.html
advisories/2006_79_kernel.html - http://secunia.com/advisories/24259 - http://rhn.redhat.com/errata/RHSA-2007-0014.html - http://projects.info-pull.com/mokb/MOKB-07-11-2006.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:047 - http://secunia.com/advisories/22767 - http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm - http://www.ubuntu.com/usn/usn-416-1 - http://www.debian.org/security/2008/dsa-1504 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10588 - http://secunia.com/advisories/24206 - http://secunia.com/advisories/23474 - http://secunia.com/advisories/23997 - http://www.securityfocus.com/archive/1/471457 - http://secu
com/advisories/23474 - http://secunia.com/advisories/23997 - http://www.securityfocus.com/archive/1/471457 - http://secunia.com/advisories/24482 - http://www.debian.org/security/2008/dsa-1503 - http://secunia.com/advisories/29058 - http://secunia.com/advisories/25630 - http://secunia.com/advisories/25691 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:060
CVE ID: CVE-2006-5824 State: PUBLISHED Published: 2006-11-09T11:00:00 Last Updated: 2024-08-07T20:04:55.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ffs_rdextattr function in FreeBSD 6.1 allows local users to cause a denial of service (kernel panic) and trigger a heap-based buffer overflow via a crafted UFS filesystem, a different vulnerability than CVE-2006-5679. NOTE: a third party states that this issue does not cross privilege boundaries in FreeBSD because only root may mount a filesystem. Additional Analyst Notes: - CVE Program Container: References: - http://lists.freebsd.org/pipermail/freebsd-security/2007-January/004218.html - http://project
m Container: References: - http://lists.freebsd.org/pipermail/freebsd-security/2007-January/004218.html - http://projects.info-pull.com/mokb/MOKB-08-11-2006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30144
CVE ID: CVE-2006-5825 State: PUBLISHED Published: 2006-11-10T01:00:00 Last Updated: 2024-08-07T20:04:55.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Kayako SupportSuite 3.00.32 allows remote attackers to inject arbitrary web script or HTML via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20954 - http://builds.kayako.net/ - http://www.securityfocus.com/archive/1/450829/100/0/threaded - http://securityreason.com/securityalert/1838 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30095
CVE ID: CVE-2006-5826 State: PUBLISHED Published: 2006-11-10T01:00:00 Last Updated: 2024-08-07T20:04:55.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Texas Imperial Software WFTPD Pro Server 3.23.1.1 allows remote authenticated users to execute arbitrary code or cause a denial of service (application crash) via crafted APPE commands that contain "/" (slash) or "\" (backslash) characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20942 - http://securityreason.com/securityalert/1837 - http://securitytracker.com/id?1017173 - https://www.exploit-db.com/exploits/2734 - http://marc.info/?l=full-disclosure&
http://securitytracker.com/id?1017173 - https://www.exploit-db.com/exploits/2734 - http://marc.info/?l=full-disclosure&m=116295408114746&w=2 - http://marc.info/?l=full-disclosure&m=116289234522958&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30079 - http://www.securityfocus.com/archive/1/450851/100/0/threaded