Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
oud.com/vulnerabilities/24285 - http://www.securityfocus.com/bid/18323 - http://www.osvdb.org/22689 - http://secunia.com/advisories/20514 - http://security.gentoo.org/glsa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/ChangeLog - http://archives.seul.org/or/announce/Jan-2006/msg00001.html
CVE ID: CVE-2006-0415 State: PUBLISHED Published: 2006-01-25T11:00:00 Last Updated: 2024-08-07T16:34:14.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in SleeperChat 0.3f and earlier allows remote attackers to inject arbitrary web script or HTML via the pseudo parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24300 - http://securitytracker.com/id?1015525 - http://www.securityfocus.com/bid/16363
CVE ID: CVE-2006-0416 State: PUBLISHED Published: 2006-01-25T11:00:00 Last Updated: 2024-08-07T16:34:14.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: SleeperChat 0.3f and earlier allows remote attackers to bypass authentication and create new entries via the txt parameter to (1) chat_no.php and (2) chat_if.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24357 - http://securitytracker.com/id?1015525
CVE ID: CVE-2006-0417 State: PUBLISHED Published: 2006-01-25T11:00:00 Last Updated: 2024-08-07T16:34:14.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in miniBloggie 1.0 and earlier, when gpc_magic_quotes is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0310 - http://www.securityfocus.com/bid/16367 - http://evuln.com/vulns/47/summary.html - http://www.osvdb.org/22729 - http://secunia.com/advisories/18604 - http://securitytracker.c
.com/vulns/47/summary.html - http://www.osvdb.org/22729 - http://secunia.com/advisories/18604 - http://securitytracker.com/id?1015534 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24280 - http://www.securityfocus.com/archive/1/423126/100/0/threaded
CVE ID: CVE-2006-0418 State: PUBLISHED Published: 2006-01-25T11:00:00 Last Updated: 2024-08-07T16:34:14.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423164/100/0/threaded - http://www.securityfocus.com/bid/16360
CVE ID: CVE-2006-0419 State: PUBLISHED Published: 2006-01-25T23:00:00 Last Updated: 2024-08-07T16:34:14.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a denial of service (unspecified) via a large number of connections. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015528 - http://dev2dev.bea.com/pub/advisory/163
CVE ID: CVE-2006-0420 State: PUBLISHED Published: 2006-01-25T23:00:00 Last Updated: 2024-08-07T16:34:14.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 8.1 through SP4 and 7.0 through SP6 does not properly handle when servlets use relative forwarding, which allows remote attackers to cause a denial of service (slowdown) via unknown attack vectors that cause "looping stack overflow errors." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015528 - http://dev2dev.bea.com/pub/advisory/164
CVE ID: CVE-2006-0421 State: PUBLISHED Published: 2006-01-25T23:00:00 Last Updated: 2024-08-07T16:34:14.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: By design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains from the same WebLogic instance on the same machine, allows administrators of any created domain to access other created domains, which could allow administrators to gain privileges that were not intended. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0313 - http://dev2dev.bea.com/pub/advisory/165 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24286 - http://sec
0313 - http://dev2dev.bea.com/pub/advisory/165 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24286 - http://securitytracker.com/id?1015528 - http://secunia.com/advisories/18581 - http://www.securityfocus.com/bid/16358
CVE ID: CVE-2006-0422 State: PUBLISHED Published: 2006-01-25T23:00:00 Last Updated: 2024-08-07T16:34:14.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allow remote attackers to access MBean attributes or cause an unspecified denial of service via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0313 - http://dev2dev.bea.com/pub/advisory/166 - http://securitytracker.com/id?1015528 - http://secunia.com/advisories/18592 - http://www.securityfocus.com/bid/16358 -
- http://securitytracker.com/id?1015528 - http://secunia.com/advisories/18592 - http://www.securityfocus.com/bid/16358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24294
CVE ID: CVE-2006-0423 State: PUBLISHED Published: 2006-01-25T23:00:00 Last Updated: 2024-08-07T16:34:14.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the config.xml file, which allows attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2008/0613 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40705 - http://secunia.com/advisories/18593 - http://dev2dev.bea.com/pub/advisory/167 - http://www.vupen.com/english/advisories/2006/0312 - http://securitytracker.com/id?1015528 - https://
/pub/advisory/167 - http://www.vupen.com/english/advisories/2006/0312 - http://securitytracker.com/id?1015528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24284 - http://www.securityfocus.com/bid/16358 - http://dev2dev.bea.com/pub/advisory/262
CVE ID: CVE-2006-0424 State: PUBLISHED Published: 2006-01-25T23:00:00 Last Updated: 2024-08-07T16:34:14.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allows remote authenticated guest users to read the server log and obtain sensitive configuration information. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/168 - http://www.vupen.com/english/advisories/2006/0313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24295 - http://www.osvdb.org/22776 - http://securitytracker.com/id?1015528 - http://secunia.com/advisories/18592 -
ities/24295 - http://www.osvdb.org/22776 - http://securitytracker.com/id?1015528 - http://secunia.com/advisories/18592 - http://www.securityfocus.com/bid/16358
CVE ID: CVE-2006-0425 State: PUBLISHED Published: 2006-01-25T23:00:00 Last Updated: 2024-08-07T16:34:14.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18593 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24297 - http://www.vupen.com/english/advisories/2006/0312 - http://securitytracker.com/id?1015528 - http://dev2dev.bea.com/pub/advisory/169 - http://www.securityfocus.com/bid/16358
CVE ID: CVE-2006-0426 State: PUBLISHED Published: 2006-01-25T23:00:00 Last Updated: 2024-08-07T16:34:14.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 8.1 through SP4, when configuration auditing is enabled and a password change occurs, stores the old and new passwords in cleartext in the DefaultAuditRecorder.log file, which could allow attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0313 - http://www.osvdb.org/22775 - http://securitytracker.com/id?1015528 - http://secunia.com/advisories/18592 - http://www.securityfocus.com/bid/16358 - https://
securitytracker.com/id?1015528 - http://secunia.com/advisories/18592 - http://www.securityfocus.com/bid/16358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24290 - http://dev2dev.bea.com/pub/advisory/170
CVE ID: CVE-2006-0427 State: PUBLISHED Published: 2006-01-25T23:00:00 Last Updated: 2024-08-07T16:34:14.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5 allows malicious EJBs or servlet applications to decrypt system passwords, possibly by accessing functionality that should have been restricted. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0313 - http://dev2dev.bea.com/pub/advisory/171 - http://securitytracker.com/id?1015528 - http://secunia.com/advisories/18592 - http://www.osvdb.org/22774 - https://exchange.xforce.ibm
ytracker.com/id?1015528 - http://secunia.com/advisories/18592 - http://www.osvdb.org/22774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24291 - http://www.securityfocus.com/bid/16358
CVE ID: CVE-2006-0428 State: PUBLISHED Published: 2006-01-25T23:00:00 Last Updated: 2024-08-07T16:34:14.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), allows remote attackers to access restricted web resources via crafted URLs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18593 - http://www.osvdb.org/22767 - http://www.vupen.com/english/advisories/2006/0312 - http://securitytracker.com/id?1015528 - http://dev2dev.bea.com/pub/advisory/172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24293 - http://www
5528 - http://dev2dev.bea.com/pub/advisory/172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24293 - http://www.securityfocus.com/bid/16358
CVE ID: CVE-2006-0429 State: PUBLISHED Published: 2006-01-25T23:00:00 Last Updated: 2024-08-07T16:34:14.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server and WebLogic Express 9.0 causes new security providers to appear active even if they have not been activated by a server reboot, which could cause an administrator to perform inappropriate, security-relevant actions. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0313 - http://www.osvdb.org/22773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24298 - http://securitytracker.com/id?1015528 - http://secunia.com/advisories/18592 - http://dev
oud.com/vulnerabilities/24298 - http://securitytracker.com/id?1015528 - http://secunia.com/advisories/18592 - http://dev2dev.bea.com/pub/advisory/173 - http://www.securityfocus.com/bid/16358
CVE ID: CVE-2006-0430 State: PUBLISHED Published: 2006-01-25T23:00:00 Last Updated: 2024-08-07T16:34:14.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain configurations of BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6, when connection filters are enabled, cause the server to run more slowly, which makes it easier for remote attackers to cause a denial of service (server slowdown). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0313 - http://dev2dev.bea.com/pub/advisory/174 - http://securitytracker.com/id?1015528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24301
om/pub/advisory/174 - http://securitytracker.com/id?1015528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24301 - http://secunia.com/advisories/18592 - http://www.securityfocus.com/bid/16358
CVE ID: CVE-2006-0431 State: PUBLISHED Published: 2006-01-25T23:00:00 Last Updated: 2024-08-07T16:34:14.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP5 allows untrusted applications to obtain the server's SSL identity via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0313 - http://securitytracker.com/id?1015528 - http://secunia.com/advisories/18592 - http://dev2dev.bea.com/pub/advisory/175 - http://www.securityfocus.com/bid/16358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24302
CVE ID: CVE-2006-0432 State: PUBLISHED Published: 2006-01-25T23:00:00 Last Updated: 2024-08-07T16:34:14.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Administration Console to add custom security policies, causes incorrect policies to be created, which prevents the server from properly protecting JNDI resources. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24299 - http://securitytracker.com/id?1015528 - http://secunia.com/advisories/18592
.xforce.ibmcloud.com/vulnerabilities/24299 - http://securitytracker.com/id?1015528 - http://secunia.com/advisories/18592 - http://dev2dev.bea.com/pub/advisory/176 - http://www.securityfocus.com/bid/16358
CVE ID: CVE-2006-0433 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T16:34:14.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Selective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote attackers to cause a denial of service (infinite loop). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0409 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:08.sack.asc - http://www.osvdb.org/22861 - http://www.securityfocus.com/bid/16466 - http://securitytracker.com/id?10
-06:08.sack.asc - http://www.osvdb.org/22861 - http://www.securityfocus.com/bid/16466 - http://securitytracker.com/id?1015566 - http://securityreason.com/securityalert/399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24453 - http://secunia.com/advisories/18696
CVE ID: CVE-2006-0434 State: PUBLISHED Published: 2006-01-26T11:00:00 Last Updated: 2024-08-07T16:34:14.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in action.php in phpXplorer allows remote attackers to read arbitrary files via ".." (dot dot) sequences and null bytes in the sAction parameter, a different vulnerability than CVE-2006-0244. NOTE: if the functionality of phpXplorer supports the upload of PHP files, then this issue would not cross privilege boundaries and would not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39982 - http://www.securit
: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39982 - http://www.securityfocus.com/archive/1/422434/100/0/threaded - http://www.securityfocus.com/bid/16292
CVE ID: CVE-2006-0435 State: PUBLISHED Published: 2006-01-26T11:00:00 Last Updated: 2024-08-07T16:34:14.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and 9.0.4.2, allows attackers to bypass the PLSQLExclusion list and access excluded packages and procedures, aka Vuln# PLSQL01. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19712 - http://secunia.com/adviso
al Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19712 - http://secunia.com/advisories/18621 - http://secunia.com/advisories/19859 - http://www.securityfocus.com/archive/1/423819/100/0/threaded - http://www.securityfocus.com/archive/1/423029/100/0/threaded - http://securityreason.com/securityalert/402 - http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html - http://securitytracker.com/id?1015544 - http://www.securityfocus.com/archive/1/423673/100/0/threaded - http://www.vupen.com/english/advisories/2006/1571 - http://www.vupen.com/english/advisories/2006/0338 - http://www.securityfocus.com/bid/16384 - http://securityreason.com/security
www.vupen.com/english/advisories/2006/0338 - http://www.securityfocus.com/bid/16384 - http://securityreason.com/securityalert/403 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24363 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041742.html - http://www.securityfocus.com/archive/1/423822/100/0/threaded - http://www.securityfocus.com/archive/1/424394/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041898.html - http://www.oracle.com/technology/deploy/security/pdf/public_vuln_to_advisory_mapping.html - http://www.vupen.com/english/advisories/2006/1397 - http://www.osvdb.
ecurity/pdf/public_vuln_to_advisory_mapping.html - http://www.vupen.com/english/advisories/2006/1397 - http://www.osvdb.org/22719 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://www.kb.cert.org/vuls/id/169164 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041899.html - http://securitytracker.com/id?1015961
CVE ID: CVE-2006-0436 State: PUBLISHED Published: 2006-01-26T11:00:00 Last Updated: 2024-08-07T16:34:14.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00591401 - http://secunia.com/advisories/18600 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1577 - http://www.vupen.com/english/advisories/2006/0322 - http://support.avaya.com/elmodocs2/security/ASA-2006-025.htm - https://exchange.x
pen.com/english/advisories/2006/0322 - http://support.avaya.com/elmodocs2/security/ASA-2006-025.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/24318 - http://secunia.com/advisories/18596 - http://securitytracker.com/id?1015530 - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00591401 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1453 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1586
CVE ID: CVE-2006-0437 State: PUBLISHED Published: 2006-02-06T22:00:00 Last Updated: 2024-08-07T16:34:14.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin_smilies.php in phpBB 2.0.19 allows remote attackers to inject arbitrary web script or HTML via Javascript events such as "onmouseover" in the (1) smile_url or (2) smile_emotion parameters, which bypasses a check for "<" and ">" characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0445 - http://secunia.com/advisories/18693 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041920.html - http://s
//secunia.com/advisories/18693 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041920.html - http://securityreason.com/achievement_securityalert/31 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24497 - http://www.osvdb.org/22928 - http://securityreason.com/securityalert/406
CVE ID: CVE-2006-0438 State: PUBLISHED Published: 2006-02-06T22:00:00 Last Updated: 2024-08-07T16:34:14.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in phpBB 2.0.19, when Link to off-site Avatar or bbcode (IMG) are enabled, allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag in a user profile, as demonstrated using links to (1) admin/admin_users.php and (2) modcp.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22929 - http://www.vupen.com/english/advisories/2006/0445 - http://secunia.com/advisories/18693 - http://lists.grok.org.uk/piperma
tp://www.vupen.com/english/advisories/2006/0445 - http://secunia.com/advisories/18693 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041920.html - http://securityreason.com/achievement_securityalert/31 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24497 - http://securityreason.com/securityalert/406
CVE ID: CVE-2006-0439 State: PUBLISHED Published: 2006-01-26T22:00:00 Last Updated: 2024-08-07T16:34:14.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Text Rider 2.4 stores sensitive data in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing data/userlist.txt. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015533 - http://www.vupen.com/english/advisories/2006/0321 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24279 - http://evuln.com/vulns/46/summary.html - http://secunia.com/advisories/18605 - htt
.ibmcloud.com/vulnerabilities/24279 - http://evuln.com/vulns/46/summary.html - http://secunia.com/advisories/18605 - http://www.securityfocus.com/archive/1/423130/100/0/threaded
CVE ID: CVE-2006-0440 State: PUBLISHED Published: 2006-01-26T22:00:00 Last Updated: 2024-08-07T16:34:14.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password (possibly via another vulnerability that reads it from a data file), then including the hash in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015533 - http://evuln.com/vulns/46/summary.html - http://www.securityfocus.com/archive/1/423130/100/0/threaded
CVE ID: CVE-2006-0441 State: PUBLISHED Published: 2006-01-26T22:00:00 Last Updated: 2024-08-07T16:34:14.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which triggers the overflow when the log is viewed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423148/100/0/threaded - https://www.exploit-db.com/exploits/40675/ - http://downloads.securityfocus.com/vulnerabilities/exploits/sami_ftp_poc.pl - http://www.karjasoft.com/samiftp/news - http://www.critical.lt/?vulnerabilities/208 - http://secunia.
/sami_ftp_poc.pl - http://www.karjasoft.com/samiftp/news - http://www.critical.lt/?vulnerabilities/208 - http://secunia.com/advisories/18574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24325 - http://www.securityfocus.com/bid/16370 - http://www.vupen.com/english/advisories/2006/0317