Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
9088/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1678 - http://www.securityfocus.com/archive/1/429124/30/6120/threaded - http://www.vupen.com/english/advisories/2006/1050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A985 - http://www.kb.cert.org/vuls/id/876678 - http://www.osvdb.org/24050 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1178 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1427.html - http://www.us-cert.gov/cas/techalerts/TA06-101A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ad
t.gov/cas/techalerts/TA06-101A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1702 - http://secunia.com/advisories/18680 - http://secunia.com/secunia_research/2006-7/advisory/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1657 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25379 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1662.html - http://securitytracker.com/id?1015812 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 - http://www.securityfocus.com/archive/1/428441 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1430.html -
tp://www.securityfocus.com/archive/1/428441 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1430.html - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1434.html - http://www.securityfocus.com/archive/1/428600/100/0/threaded - http://www.microsoft.com/technet/security/advisory/917077.mspx - http://www.securityfocus.com/bid/17196 - http://www.ciac.org/ciac/bulletins/q-154.shtml - http://www.vupen.com/english/advisories/2006/1318 - http://www.securityfocus.com/archive/1/428583/100/0/threaded
CVE ID: CVE-2006-1360 State: PUBLISHED Published: 2006-03-23T11:00:00 Last Updated: 2024-08-07T17:12:20.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) type, or (3) show parameter to (a) index.php; or the (4) message1 or (5) message parameter to (b) cart.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/441000/100/0/threaded - http://www.securityfocus.com/archive/1/428972/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27926 - http://www.securityfocus.com/bid/
1/428972/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27926 - http://www.securityfocus.com/bid/17149
CVE ID: CVE-2006-1361 State: PUBLISHED Published: 2006-03-23T11:00:00 Last Updated: 2024-08-07T17:12:20.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the username field to (1) list.rhtml or (2) show.rhtml. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25410 - http://www.vupen.com/english/advisories/2006/1035 - http://svn.sourceforge.net/viewcvs.cgi/opensourcewiki/branches/0.3/oswiki/app/views/user/list.rhtml?view=log - http://secunia.com/advisories/19290 - http://www.securit
cewiki/branches/0.3/oswiki/app/views/user/list.rhtml?view=log - http://secunia.com/advisories/19290 - http://www.securityfocus.com/bid/17189
CVE ID: CVE-2006-1362 State: PUBLISHED Published: 2006-03-23T11:00:00 Last Updated: 2024-08-07T17:12:20.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Mini-Nuke CMS System 1.8.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter in (a) members.asp, the (2) catid parameter in (b) articles.asp and (c) programs.asp, and the (3) id parameter in (d) hpages.asp and (e) forum.asp. NOTE: The pages.asp/id vector is already covered by CVE-2006-0870. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25372 - http://secunia.com/advisori
rogram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25372 - http://secunia.com/advisories/18439 - http://securityreason.com/securityalert/617 - http://www.securityfocus.com/archive/1/428361/100/0/threaded
CVE ID: CVE-2006-1363 State: PUBLISHED Published: 2006-03-23T11:00:00 Last Updated: 2024-08-07T17:12:20.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath parameter, then performing a direct request to that file. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1600 - http://secunia.com/advisories/19343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25377 - http://www.vupen.com/english/advisories/2006/1038
CVE ID: CVE-2006-1364 State: PUBLISHED Published: 2006-03-23T11:00:00 Last Updated: 2024-08-07T17:12:20.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service (resource consumption or crash) by repeatedly requesting each of several documents that refer to COM components, or are restricted documents located under the ASP.NET application path. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/428622/100/0/threaded - http://hackingspirit
CVE Program Container: References: - http://www.securityfocus.com/archive/1/428622/100/0/threaded - http://hackingspirits.com/vuln-rnd/w3wp-remote-dos.zip - http://securitytracker.com/id?1015825 - http://www.securityfocus.com/bid/17188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25392 - https://www.exploit-db.com/exploits/1601 - http://www.securiteam.com/windowsntfocus/5KP0O0KI0Y.html - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044291.html - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044292.html
CVE ID: CVE-2006-1365 State: PUBLISHED Published: 2006-03-23T23:00:00 Last Updated: 2024-08-07T17:12:20.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Motorola PEBL U6, the Motorola V600, and possibly the Motorola E398 and other Motorola phones allow remote attackers to add an entry for their own Bluetooth device to a target device's list of trusted devices (aka Device History), and possibly obtain AT level access to the target device, by initiating and interrupting an OBEX Push Profile that pretends to send a vCard, aka a "HeloMoto" attack. Additional Analyst Notes: - CVE Program Container: References: - http://trifinite.org/trifinite_stuff_helomoto.html - http://www.se
Analyst Notes: - CVE Program Container: References: - http://trifinite.org/trifinite_stuff_helomoto.html - http://www.securityfocus.com/archive/1/428431/100/0/threaded - http://www.digitalmunition.com/DMA%5B2006-0321a%5D.txt
CVE ID: CVE-2006-1366 State: PUBLISHED Published: 2006-03-23T23:00:00 Last Updated: 2024-08-07T17:12:21.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Motorola PEBL U6 08.83.76R, and possibly other Motorola P2K-based phones, allows remote attackers to cause a denial of service (device shutdown), and possibly execute arbitrary code, via a long OBEX setpath to the OBEX File Transfer (aka FTP) service on Bluetooth channel 9. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25401 - http://www.securityfocus.com/archive/1/428431/100/0/threaded - http://secunia.com/advisories/19319 - http://
ies/25401 - http://www.securityfocus.com/archive/1/428431/100/0/threaded - http://secunia.com/advisories/19319 - http://www.securityfocus.com/bid/17185 - http://www.digitalmunition.com/DMA%5B2006-0321a%5D.txt - http://www.vupen.com/english/advisories/2006/1045 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044287.html
CVE ID: CVE-2006-1367 State: PUBLISHED Published: 2006-03-23T23:00:00 Last Updated: 2024-08-07T17:12:20.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Motorola PEBL U6 08.83.76R, the Motorola V600, and possibly the Motorola E398 and other Motorola P2K-based phones does not require pairing for a connection related to the Headset Audio Gateway service, which allows user-assisted remote attackers to obtain AT level access and view phonebook entries and saved SMS messages by connecting on Bluetooth channel 3 and tricking the user into pressing Grant, aka a "Blueline" attack. NOTE: while user-assisted, the attack is made more feasible because of a GUI misrepresentation issue
"Blueline" attack. NOTE: while user-assisted, the attack is made more feasible because of a GUI misrepresentation issue that allows a default message to be replaced by an attacker-specified one. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/428431/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25402 - http://secunia.com/advisories/19319 - http://www.securityfocus.com/bid/17190 - http://www.digitalmunition.com/DMA%5B2006-0321a%5D.txt - http://www.vupen.com/english/advisories/2006/1045 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044287.html
CVE ID: CVE-2006-1368 State: PUBLISHED Published: 2006-03-23T23:00:00 Last Updated: 2024-08-07T17:12:20.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (kmalloc'd memory corruption) via a remote NDIS response to OID_GEN_SUPPORTED_LIST, which causes memory to be allocated for the reply data but not the reply structure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17831 - http://www.vupen.com/english/advisories/2006/2554 - https://usn.ubuntu.com/281-1/ - http://www.vupen.com/english/adv
1 - http://www.vupen.com/english/advisories/2006/2554 - https://usn.ubuntu.com/281-1/ - http://www.vupen.com/english/advisories/2006/1046 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:123 - http://www.debian.org/security/2006/dsa-1097 - http://secunia.com/advisories/19955 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16 - http://www.debian.org/security/2006/dsa-1103 - http://secunia.com/advisories/21045 - http://secunia.com/advisories/19330 - http://secunia.com/advisories/20671 - http://secunia.com/advisories/20914 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8763716bfe4d8a16bef28c9947cf9d799b1796a5
CVE ID: CVE-2006-1369 State: PUBLISHED Published: 2006-03-23T23:00:00 Last Updated: 2024-08-07T17:12:20.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.5 and earlier before 20060308 allows remote attackers to inject arbitrary web script or HTML via a Private Message (PM) in certain circumstances. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19299 - http://forums.invisionpower.com/index.php?showtopic=209178 - http://www.vupen.com/english/advisories/2006/1044 - http://www.securityfocus.com/bid/17187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
h/advisories/2006/1044 - http://www.securityfocus.com/bid/17187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25384
CVE ID: CVE-2006-1370 State: PUBLISHED Published: 2006-03-23T23:00:00 Last Updated: 2024-08-07T17:12:20.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, RealPlayer 8, and RealPlayer Enterprise before 20060322 allows remote attackers to have an unknown impact via a malicious Mimio boardCast (mbc) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.service.real.com/realplayer/security/03162006_player/en/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/25411 - http://secunia.com/advisories/19358 - http://www.vup
/en/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/25411 - http://secunia.com/advisories/19358 - http://www.vupen.com/english/advisories/2006/1057 - http://www.securityfocus.com/bid/17202 - http://www.kb.cert.org/vuls/id/451556 - http://securitytracker.com/id?1015810
CVE ID: CVE-2006-1371 State: PUBLISHED Published: 2006-03-23T23:00:00 Last Updated: 2024-08-07T17:12:20.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5 and earlier allows remote authenticated users to use the HTMLArea FileManager plugin to upload and execute arbitrary PHP files using (1) manager.php, (2) standalonemanager.php, and (3) images.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19353 - http://www.osvdb.org/24058 - http://xhp.targetit.ro/index.php?page=3&box_id=34&action=show_single_entry&post_id=10 - http://www.securityfocus.com/bid/17209 - http://www.vupen.com/en
?page=3&box_id=34&action=show_single_entry&post_id=10 - http://www.securityfocus.com/bid/17209 - http://www.vupen.com/english/advisories/2006/1052 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25399 - http://www.attrition.org/pipermail/vim/2006-March/000649.html - https://www.exploit-db.com/exploits/1605 - http://www.osvdb.org/24059
CVE ID: CVE-2006-1372 State: PUBLISHED Published: 2006-03-24T02:00:00 Last Updated: 2024-08-07T17:12:20.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in 1WebCalendar 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) EventID parameter in viewEvent.cfm, (2) NewsID parameter in newsView.cfm, or (3) ThisDate parameter in mainCal.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/03/1webcalendar-v-4x-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25373 - http://www.osvdb.org/24023 - http://www.securityfocus.com/bid/17193 - http://secuni
ibmcloud.com/vulnerabilities/25373 - http://www.osvdb.org/24023 - http://www.securityfocus.com/bid/17193 - http://secunia.com/advisories/19329 - http://www.vupen.com/english/advisories/2006/1040 - http://www.osvdb.org/24021 - http://www.osvdb.org/24022
CVE ID: CVE-2006-1373 State: PUBLISHED Published: 2006-03-24T02:00:00 Last Updated: 2024-08-07T17:12:20.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in status_image.php in PHP Live! 3.0 allows remote attackers to inject arbitrary web script or HTML via the base_url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25386 - http://www.securityfocus.com/archive/1/428452/100/0/threaded - http://secunia.com/advisories/19340 - http://www.vupen.com/english/advisories/2006/1054 - http://www.securityfocus.com/bid/17184
CVE ID: CVE-2006-1374 State: PUBLISHED Published: 2006-03-24T02:00:00 Last Updated: 2024-08-07T17:12:20.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands via the transactions_offset parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/03/adman-v10x-sql-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25403 - http://secunia.com/advisories/19351 - http://www.vupen.com/english/advisories/2006/1071 - http://www.osvdb.org/24064 - http://www.securityfocus.com/bid/17208
CVE ID: CVE-2006-1375 State: PUBLISHED Published: 2006-03-24T02:00:00 Last Updated: 2024-08-07T17:12:21.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via (1) a blank campaignId parameter to editCampaign.php and (2) a blank schemeId parameter to viewPricingScheme.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24065 - http://pridels0.blogspot.com/2006/03/adman-v10x-sql-vuln.html - http://www.osvdb.org/24066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25404 - http://secunia.com/advisories/19351 - http://www.vupen.com/english/advisories/2006/1071
CVE ID: CVE-2006-1376 State: PUBLISHED Published: 2006-03-24T02:00:00 Last Updated: 2024-08-07T17:12:20.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian-installer/cdebconf with world writable permissions, which allows local users to cause a denial of service (disk consumption). Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=358210 - http://secunia.com/advisories/19331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25526
CVE ID: CVE-2006-1377 State: PUBLISHED Published: 2006-03-24T02:00:00 Last Updated: 2024-08-07T17:12:20.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in img.php in (1) EasyMoblog 0.5.1 and (2) CoMoblog 1.1 allows remote attackers to inject arbitrary web script or HTML via the i parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24093 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25416 - http://www.vupen.com/english/advisories/2006/1087 - http://secunia.com/advisories/19379 - http://www.securityfocus.com/archive/1/428553
n.com/english/advisories/2006/1087 - http://secunia.com/advisories/19379 - http://www.securityfocus.com/archive/1/428553/100/0/threaded - http://www.securityfocus.com/bid/17201 - http://www.vupen.com/english/advisories/2006/1086 - http://www.securityfocus.com/bid/17199 - http://www.osvdb.org/24094 - http://www.kapda.ir/advisory-301.html - http://secunia.com/advisories/19370 - http://securitytracker.com/id?1015824
CVE ID: CVE-2006-1378 State: PUBLISHED Published: 2006-03-24T02:00:00 Last Updated: 2024-08-07T17:12:20.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator (C++ rand function) during generation of the database encryption key, which makes it easier for attackers to decrypt the database and steal passwords by generating keys for all possible rand() seed values and conducting a known plaintext attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25429 - http://securityreason.com/securityalert/618 - http://www.securityf
/exchange.xforce.ibmcloud.com/vulnerabilities/25429 - http://securityreason.com/securityalert/618 - http://www.securityfocus.com/archive/1/428552/100/0/threaded - http://www.securityfocus.com/archive/1/445509/100/0/threaded - http://www.securityfocus.com/bid/17200
CVE ID: CVE-2006-1379 State: PUBLISHED Published: 2006-03-24T11:00:00 Last Updated: 2024-08-07T17:12:20.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as (1) tmntsrv.exe and (2) tmproxy.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english - http://secunia.com/advisories/19282 - http://www.vupen.com/english/advisories/2006/1042
CVE ID: CVE-2006-1380 State: PUBLISHED Published: 2006-03-24T11:00:00 Last Updated: 2024-08-07T17:12:21.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25415 - http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english - http://www.vupen.com/english/advisories/2006/1041 -
content/french/modules/news/article.php?storyid=9&sel_lang=english - http://www.vupen.com/english/advisories/2006/1041 - http://secunia.com/advisories/19022
CVE ID: CVE-2006-1381 State: PUBLISHED Published: 2006-03-24T11:00:00 Last Updated: 2024-08-07T17:12:21.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25415 - http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english - http://www.vupen.com/english/advisories/2006/1041 - http://secunia.com/advisories/11576
CVE ID: CVE-2006-1382 State: PUBLISHED Published: 2006-03-24T11:00:00 Last Updated: 2024-08-07T17:12:20.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74, when register_globals is disabled, allows remote attackers to include arbitrary files via the systempath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/467666/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044318.html - http://www.vupen.com/english/advisories/2006/1056 - http://www.securityfocus.com/bid/17206 - https://exchange.xforce.
- http://www.vupen.com/english/advisories/2006/1056 - http://www.securityfocus.com/bid/17206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34095 - http://secunia.com/advisories/19352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25391 - http://www.osvdb.org/24070
CVE ID: CVE-2006-1383 State: PUBLISHED Published: 2006-03-24T11:00:00 Last Updated: 2024-08-07T17:12:21.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25413 - http://secunia.com/advisories/19338 - http://www.vupen.com/english/advisories/2006
.ibmcloud.com/vulnerabilities/25413 - http://secunia.com/advisories/19338 - http://www.vupen.com/english/advisories/2006/1069 - http://www.osvdb.org/24057
CVE ID: CVE-2006-1384 State: PUBLISHED Published: 2006-03-24T11:00:00 Last Updated: 2024-08-07T17:12:21.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in apwc_win_main.jsp in the web console in IBM Tivoli Business Systems Manager (TBSM) before 3.1.0.1 allows remote attackers to inject arbitrary web script or HTML via the skin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1OA14904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25412 - http://www.osvdb.org/24069 - http://secunia.com/advisories/19332 - http://www.vupen.com/english/advisories/2006/1073 -