Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0335 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:14.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Kerio WinRoute Firewall before 6.1.4 Patch 1 allow remote attackers to cause a denial of service via multiple unspecified vectors involving (1) long strings received from Active Directory and (2) the filtering of HTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22631 - http://www.vupen.com/english/advisories/2006/0247 - http://secunia.com/advisories/18542 - http://www.securityfocus.com/bid/16314 - http://www.kerio.com/kwf_history.html - https://
secunia.com/advisories/18542 - http://www.securityfocus.com/bid/16314 - http://www.kerio.com/kwf_history.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24232 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24233
CVE ID: CVE-2006-0336 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:14.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kerio WinRoute Firewall before 6.1.4 Patch 2 allows attackers to cause a denial of service (CPU consumption and hang) via unknown vectors involving "browsing the web". Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22631 - http://secunia.com/advisories/18589 - http://www.securityfocus.com/bid/16385 - http://www.vupen.com/english/advisories/2006/0324 - http://www.kerio.com/kwf_history.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24317
CVE ID: CVE-2006-0337 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:14.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allows remote attackers to execute arbitrary code via crafted ZIP archives. Additional Analyst Notes: - CVE Program Container: References: - http://www.f-secure.com/security/fsc-2006-1.shtml - http://securitytracker.com/id?1015510 - http://secunia.com/advisories/18529 - http://www.osvdb.or
ity/fsc-2006-1.shtml - http://securitytracker.com/id?1015510 - http://secunia.com/advisories/18529 - http://www.osvdb.org/22632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24198 - http://securitytracker.com/id?1015509 - http://www.securityfocus.com/bid/16309 - http://www.ciac.org/ciac/bulletins/q-103.shtml - http://securitytracker.com/id?1015508 - http://securitytracker.com/id?1015507 - http://www.vupen.com/english/advisories/2006/0257
CVE ID: CVE-2006-0338 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:14.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple F-Secure Anti-Virus products and versions for Windows and Linux, including Anti-Virus for Windows Servers 5.52 and earlier, Internet Security 2004, 2005 and 2006, and Anti-Virus for Linux Servers 4.64 and earlier, allow remote attackers to hide arbitrary files and data via malformed (1) RAR and (2) ZIP archives, which are not properly scanned. Additional Analyst Notes: - CVE Program Container: References: - http://www.f-secure.com/security/fsc-2006-1.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/24199 -
nces: - http://www.f-secure.com/security/fsc-2006-1.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/24199 - http://securitytracker.com/id?1015510 - http://secunia.com/advisories/18529 - http://www.osvdb.org/22633 - http://securitytracker.com/id?1015509 - http://www.securityfocus.com/bid/16309 - http://www.ciac.org/ciac/bulletins/q-103.shtml - http://securitytracker.com/id?1015508 - http://securitytracker.com/id?1015507 - http://www.vupen.com/english/advisories/2006/0257
CVE ID: CVE-2006-0339 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:14.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in BitComet Client 0.60 allows remote attackers to execute arbitrary code, when the publisher's name link is clicked, via a long publisher URI in a torrent file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18522 - http://www.securityfocus.com/archive/1/422361/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0669.html - http://www.vupen.com/english/advisories/2006/0251 - http://securityreason.com/securityalert/357 - http://archives.
tml - http://www.vupen.com/english/advisories/2006/0251 - http://securityreason.com/securityalert/357 - http://archives.neohapsis.com/archives/bugtraq/2006-01/0442.html - http://www.osvdb.org/22625 - http://www.bitcomet.com/doc/changelog.htm - http://www.fortinet.com/FortiGuardCenter/FSA-2006-07.html - http://www.securityfocus.com/bid/16311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24229
CVE ID: CVE-2006-0340 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:14.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Stack Group Bidding Protocol (SGBP) support in Cisco IOS 12.0 through 12.4 running on various Cisco products, when SGBP is enabled, allows remote attackers on the local network to cause a denial of service (device hang and network traffic loss) via a crafted UDP packet to port 9900. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18490 - http://www.cisco.com/warp/public/707/cisco-sa-20060118-sgbp.shtml - http://www.vupen.com/english/advisories/2006/024
0 - http://www.cisco.com/warp/public/707/cisco-sa-20060118-sgbp.shtml - http://www.vupen.com/english/advisories/2006/0248 - http://securityreason.com/securityalert/358 - http://www.securityfocus.com/bid/16303 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24182 - http://www.osvdb.org/22624 - http://securitytracker.com/id?1015501
CVE ID: CVE-2006-0341 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:14.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WCONSOLE.DLL in Rockliffe MailSite 5.x and 6.1.22 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16330 - http://www.vupen.com/english/advisories/2006/0284 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24256 - http://marc.info/?l=full-disclosure&m=113777628702043&w=2 - http://www.osvdb.org/22677 - http://secunia.com/advisories/185
tp://marc.info/?l=full-disclosure&m=113777628702043&w=2 - http://www.osvdb.org/22677 - http://secunia.com/advisories/18551
CVE ID: CVE-2006-0342 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:14.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: RockLiffe MailSite HTTP Mail management agent (httpma) 7.0.3.1 allows remote attackers to cause a denial of service (CPU consumption and crash) via a malformed query string containing special characters such as "|". Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0284 - http://marc.info/?l=full-disclosure&m=113777628702043&w=2 - http://www.osvdb.org/22678 - http://secunia.com/advisories/18551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24255 - http://www.
g/22678 - http://secunia.com/advisories/18551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24255 - http://www.securityfocus.com/bid/16331
CVE ID: CVE-2006-0343 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:14.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Port Discovery Standard and Advanced features in Hitachi JP1/NetInsight II allows attackers to stop the Port Discovery service via unknown vectors involving "invalid format data". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16327 - http://www.hitachi-support.com/security_e/vuls_e/HS05-027_e/index-e.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24243 - http://www.vupen.com/english/advisories/2006/0267 - http://www.osvdb.org/2267
force.ibmcloud.com/vulnerabilities/24243 - http://www.vupen.com/english/advisories/2006/0267 - http://www.osvdb.org/22676 - http://securitytracker.com/id?1015520 - http://secunia.com/advisories/18538
CVE ID: CVE-2006-0344 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:13.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Intervations FileCOPA FTP Server 1.01 allows remote attackers to read and write arbitrary files via a .. (dot dot) in the (1) STOR and (2) RETR commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18550 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24257 - http://www.nii.co.in/vuln/filecopa.html - http://www.osvdb.org/22694 - http://www.vupen.com/english/advisories/2006/0285 - http://www.securityfocus.com/bid/16335
CVE ID: CVE-2006-0345 State: PUBLISHED Published: 2006-01-21T01:00:00 Last Updated: 2024-08-07T16:34:14.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the search parameter to search.php. NOTE: the id/viewprofile.php issue is already covered by CVE-2005-4058. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16306 - http://www.osvdb.org/22740 - http://securitytracker.com/id?1015517 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24218 - http://archives.neohapsis.com/archives/bugtraq/2006-01/0372.html - http
ange.xforce.ibmcloud.com/vulnerabilities/24218 - http://archives.neohapsis.com/archives/bugtraq/2006-01/0372.html - http://evuln.com/vulns/40/summary.html
CVE ID: CVE-2006-0346 State: PUBLISHED Published: 2006-01-21T01:00:00 Last Updated: 2024-08-07T16:34:14.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SaralBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via a website field in a new comment to view.php, which is not properly handled in the comment function in functions.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16306 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24219 - http://www.osvdb.org/27907 - http://securitytracker.com/id?1015517 - http://archives.neohapsis.com/archives/bugtraq/2006-0
tp://www.osvdb.org/27907 - http://securitytracker.com/id?1015517 - http://archives.neohapsis.com/archives/bugtraq/2006-01/0372.html - http://evuln.com/vulns/40/summary.html
CVE ID: CVE-2006-0347 State: PUBLISHED Published: 2006-01-21T01:00:00 Last Updated: 2024-08-07T16:34:14.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in ELOG before 2.6.1 allows remote attackers to access arbitrary files outside of the elog directory via "../" (dot dot) sequences in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16315 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24224 - http://secunia.com/advisories/18783 - http://www.vupen.com/english/advisories/2006/0262 - http://secunia.com/advisories/18533 - http://www.debian.org/security/2006/dsa-967 - http://midas.p
dvisories/2006/0262 - http://secunia.com/advisories/18533 - http://www.debian.org/security/2006/dsa-967 - http://midas.psi.ch/elog/download/ChangeLog - http://www.osvdb.org/22647
CVE ID: CVE-2006-0348 State: PUBLISHED Published: 2006-01-21T01:00:00 Last Updated: 2024-08-07T16:34:13.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the write_logfile function in ELOG before 2.6.1 allows remote attackers to cause a denial of service (server crash) via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22646 - http://www.securityfocus.com/bid/16315 - http://secunia.com/advisories/18783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24221 - http://w
/bid/16315 - http://secunia.com/advisories/18783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24221 - http://www.vupen.com/english/advisories/2006/0262 - http://secunia.com/advisories/18533 - http://www.debian.org/security/2006/dsa-967 - http://midas.psi.ch/elog/download/ChangeLog
CVE ID: CVE-2006-0349 State: PUBLISHED Published: 2006-01-21T01:00:00 Last Updated: 2024-08-07T16:34:14.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to blog.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015505 - http://www.securityfocus.com/bid/16305 - http://www.osvdb.org/22751 - http://archives.neohapsis.com/archives/bugtraq/2006-01/0371.html - http://evuln.com/vulns/39/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24210 - http://secunia.com/advisories/18212
CVE ID: CVE-2006-0350 State: PUBLISHED Published: 2006-01-21T01:00:00 Last Updated: 2024-08-07T16:34:14.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML via the message field to topic.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015505 - http://www.osvdb.org/22752 - http://www.securityfocus.com/bid/16305 - http://archives.neohapsis.com/archives/bugtraq/2006-01/0371.html - http://evuln.com/vulns/39/summary.html - http://secunia.com/advisories/18212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2420
/vulns/39/summary.html - http://secunia.com/advisories/18212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24209
CVE ID: CVE-2006-0351 State: PUBLISHED Published: 2006-01-21T01:00:00 Last Updated: 2024-08-07T16:34:14.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-963 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24228 - http://secunia.com/advisories/18653 - http://mydns.bboy.net/download/changelog.html - http://secunia.com/advisories/18641 - http://www.securityfocus.com/bid/16431 - http://www.gentoo.org/security/en/glsa/glsa-200601-16.xml - http://secunia.com/
http://www.securityfocus.com/bid/16431 - http://www.gentoo.org/security/en/glsa/glsa-200601-16.xml - http://secunia.com/advisories/18532 - http://www.vupen.com/english/advisories/2006/0256 - http://securitytracker.com/id?1015521 - http://www.osvdb.org/22636
CVE ID: CVE-2006-0352 State: PUBLISHED Published: 2006-01-21T01:00:00 Last Updated: 2024-08-07T16:34:14.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Fluffington FLog 1.01 installs users.0.dat under the web document root with insufficient access control, which might allow remote attackers to obtain sensitive information (login credentials) via a direct request. NOTE: It was later reported that 1.1.2 is also affected. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24193 - http://www.securityfocus.com/archive/1/422268/100/0/threaded - http://www.securityfocus.com/archive/1/4560
ities/24193 - http://www.securityfocus.com/archive/1/422268/100/0/threaded - http://www.securityfocus.com/archive/1/456069/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31307 - http://evuln.com/vulns/38/summary/bt/
CVE ID: CVE-2006-0353 State: PUBLISHED Published: 2006-01-22T19:00:00 Last Updated: 2024-08-07T16:34:14.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: unix_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file, which prevents the server from starting, or obtain sensitive seed information that could be used to crack keys. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16357 - http://lists.lysator.liu.se/pipermail/lsh-bugs/2006q1/000467.html - http://secunia.com/advisories/18623 - http://www.osvdb.org/22695 -
sator.liu.se/pipermail/lsh-bugs/2006q1/000467.html - http://secunia.com/advisories/18623 - http://www.osvdb.org/22695 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24263 - http://www.debian.org/security/2006/dsa-956 - http://www.vupen.com/english/advisories/2006/0301 - http://secunia.com/advisories/18564
CVE ID: CVE-2006-0354 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS before 12.3-7-JA2 on Aironet Wireless Access Points (WAP) allows remote authenticated users to cause a denial of service (termination of packet passing or termination of client connections) by sending the management interface a large number of spoofed ARP packets, which creates a large ARP table that exhausts memory, aka Bug ID CSCsc16644. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/339 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m
s: - http://securityreason.com/securityalert/339 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5680 - http://www.osvdb.org/22375 - http://www.vupen.com/english/advisories/2006/0176 - http://secunia.com/advisories/18430 - http://www.cisco.com/warp/public/707/cisco-sa-20060112-wireless.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/24086 - http://www.securityfocus.com/bid/16217 - http://securitytracker.com/id?1015483
CVE ID: CVE-2006-0355 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Helmsman Research (aka CoolUtils) HomeFtp 1.1 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command and an NLST command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24152 - http://www.securityfocus.com/archive/1/421869/100/0/threaded - http://www.securityfocus.com/bid/16238 - http://www.kapda.ir/advisory-202.html - http://securityreason.com/securityalert/350
CVE ID: CVE-2006-0356 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ari Pikivirta Home Ftp Server 1.0.7 allows remote attackers to cause an unspecified denial of service via a long USER command combined with a long PASS command. Additional Analyst Notes: - CVE Program Container: References: - http://www.kapda.ir/advisory-211.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24227 - http://www.securityfocus.com/archive/1/422033/100/0/threaded
CVE ID: CVE-2006-0357 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grant Averett Cerberus FTP Server 2.32, and possibly earlier versions, allows remote attackers to cause an unspecified denial of service via a long string that does not contain a valid FTP command. Additional Analyst Notes: - CVE Program Container: References: - http://www.kapda.ir/advisory-210.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24226 - http://www.securityfocus.com/archive/1/422162/100/0/threaded - http://www.cerberusftp.com/cerberus-releasenotes.htm
CVE ID: CVE-2006-0358 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PowerPortal, possibly 1.1 beta through 1.3, allow remote attackers to execute arbitrary SQL commands via the search parameter in (1) index.php and (2) search.php. NOTE: This issue might overlap CVE-2004-0663.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16279 - http://secunia.com/advisories/10172 - http://web.archive.org/web/20050303003128/http://powerportal.sourceforge.net/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/24
ive.org/web/20050303003128/http://powerportal.sourceforge.net/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/24196 - http://www.osvdb.org/27957 - http://www.securityfocus.com/archive/1/422151/100/0/threaded - http://www.osvdb.org/27958
CVE ID: CVE-2006-0359 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a denial of service (device crash) via SIP INVITE commands with a long header field name sent during startup and (2) cause a denial of service (device hang or crash) via SIP INVITE commands with a long header field name sent during a call. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0259 - http://blog.donews.com/zwell/archive/2006/01/17/698810.aspx - http://www.securityfocu
com/english/advisories/2006/0259 - http://blog.donews.com/zwell/archive/2006/01/17/698810.aspx - http://www.securityfocus.com/archive/1/422009/100/0/threaded - http://www.securityfocus.com/bid/16253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24181 - http://secunia.com/advisories/18516 - http://securityreason.com/securityalert/354 - http://www.securityfocus.com/archive/1/446573/100/0/threaded
CVE ID: CVE-2006-0360 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: MPM SIP HP-180W Wireless IP Phone WE.00.17 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18512 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041437.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24147 - http://www.securityfocus.com/bid/16285
CVE ID: CVE-2006-0361 State: PUBLISHED Published: 2006-01-22T20:00:00 Last Updated: 2024-08-07T16:34:14.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in addcomment.php in Bit 5 Blog 8.01 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in an <a> tag in the comment parameter, which strips most tags but not <a>. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/32/exploit - http://secunia.com/advisories/18464 - http://www.securityfocus.com/bid/16246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24129 - http://evuln.com/vulns/32/summary/ - http://www.secur
246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24129 - http://evuln.com/vulns/32/summary/ - http://www.securityfocus.com/archive/1/421994/100/0/threaded - http://www.osvdb.org/22446 - http://www.vupen.com/english/advisories/2006/0195