Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0547 State: PUBLISHED Published: 2006-02-04T02:00:00 Last Updated: 2024-08-07T16:41:28.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Database 8i, 9i, and 10g allow remote authenticated users to execute arbitrary SQL statements in the context of the SYS user and bypass audit logging, including statements to create new privileged database accounts, via a modified AUTH_ALTER_SESSION attribute in the authentication phase of the Transparent Network Substrate (TNS) protocol. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle.
ry, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle. It is possible that this is the same issue as Oracle Vuln# DB18 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0265. Additional Analyst Notes: - CVE Program Container: References: - http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf - http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html - http://www.us-cert.gov/cas/techalerts/TA06-018A.html - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041464.html - http://www.kb.cert.org/vuls/id/871756 - https://exchange.xforce.ibmcloud.com/vulnerabilities
/2006-January/041464.html - http://www.kb.cert.org/vuls/id/871756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24184 - http://www.imperva.com/application_defense_center/papers/oracle-dbms-01172006.html - http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html
CVE ID: CVE-2006-0548 State: PUBLISHED Published: 2006-02-04T02:00:00 Last Updated: 2024-08-07T16:41:28.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Oracle Text component of Oracle Database 10g, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle. It is possible that this is the same issue as Oracle Vuln# DB15 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0260. Addit
same issue as Oracle Vuln# DB15 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0260. Additional Analyst Notes: - CVE Program Container: References: - http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html - http://www.kb.cert.org/vuls/id/150332 - http://www.us-cert.gov/cas/techalerts/TA06-018A.html - http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html
CVE ID: CVE-2006-0549 State: PUBLISHED Published: 2006-02-04T02:00:00 Last Updated: 2024-08-07T16:41:28.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the SYS.DBMS_METADATA_UTIL package in Oracle Database 10g, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle. It is possible that this is the same issue as Oracle Vuln# DB05 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-02
is is the same issue as Oracle Vuln# DB05 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0260. However, there are some inconsistencies that make this unclear, and there is also a possibility that this is related to DB06, which is subsumed by CVE-2006-0259. Additional Analyst Notes: - CVE Program Container: References: - http://www.red-database-security.com/advisory/oracle_sql_injection_dbms_metadata_util.html - http://www.kb.cert.org/vuls/id/629316 - http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html - http://www.u
mcloud.com/vulnerabilities/24321 - http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html - http://www.us-cert.gov/cas/techalerts/TA06-018A.html - http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html
CVE ID: CVE-2006-0550 State: PUBLISHED Published: 2006-02-04T02:00:00 Last Updated: 2024-08-07T16:41:28.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in an unspecified Oracle Client utility might allow remote attackers to execute arbitrary code or cause a denial of service. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle. It is possible that this is the same issue as Oracle Vuln# DBC02 from the January 2006 CPU, in which case this would be a duplicate of CVE-2006-0283. However, there are enough inconsistencies that the mappi
CPU, in which case this would be a duplicate of CVE-2006-0283. However, there are enough inconsistencies that the mapping can not be made authoritatively. Additional Analyst Notes: - CVE Program Container: References: - http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html - http://www.kb.cert.org/vuls/id/999268 - http://www.us-cert.gov/cas/techalerts/TA06-018A.html - http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html
CVE ID: CVE-2006-0551 State: PUBLISHED Published: 2006-02-04T02:00:00 Last Updated: 2024-08-07T16:41:28.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Data Pump Metadata API in Oracle Database 10g and possibly earlier might allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: due to the lack of relevant details from the Oracle advisory, a separate CVE is being created since it cannot be conclusively proven that this issue has been addressed by Oracle. It is possible that this is the same issue as Oracle Vuln# DB06 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0259 or, if it is DB0
e as Oracle Vuln# DB06 from the January 2006 CPU, in which case this would be subsumed by CVE-2006-0259 or, if it is DB05, subsumed by CVE-2006-0260. Additional Analyst Notes: - CVE Program Container: References: - http://www.integrigy.com/info/IntegrigySecurityAnalysis-CPU0106.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://www.red-database-security.com/advisory/oracle_cpu_jan_2006.html - http://www.us-cert.gov/cas/techalerts/TA06-018A.html - http://www.kb.cert.org/vuls/id/983340 - http://www.oracle.com/technology/deploy/security/pdf/cpujan2006.html
CVE ID: CVE-2006-0552 State: PUBLISHED Published: 2006-02-04T11:00:00 Last Updated: 2024-08-07T16:41:28.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB11. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24321 - http://secunia.com/advisories/18493 - http://www.vupen.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - h
en.com/english/advisories/2006/0323 - http://www.securityfocus.com/bid/16287 - http://www.kb.cert.org/vuls/id/545804 - http://securitytracker.com/id?1015499 - http://www.vupen.com/english/advisories/2006/0243 - http://www.oracle.com/technetwork/topics/security/cpujan2006-082403.html - http://secunia.com/advisories/18608
CVE ID: CVE-2006-0553 State: PUBLISHED Published: 2006-02-14T19:00:00 Last Updated: 2024-08-07T16:41:28.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 8.1.0 through 8.1.2 allows authenticated database users to gain additional privileges via "knowledge of the backend protocol" using a crafted SET ROLE to other database users, a different vulnerability than CVE-2006-0678. Additional Analyst Notes: - CVE Program Container: References: - http://www.postgresql.org/docs/8.1/static/release.html#RELEASE-8-1-3 - http://www.vupen.com/english/advisories/2006/0605 - http://secunia.com/advisories/18890 - http://www.kb.cert.org/vuls/id/567452 - http://www.securityfocus.com/bid/
6/0605 - http://secunia.com/advisories/18890 - http://www.kb.cert.org/vuls/id/567452 - http://www.securityfocus.com/bid/16649 - http://archives.postgresql.org/pgsql-announce/2006-02/msg00008.php - http://securitytracker.com/id?1015636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24718 - http://www.openpkg.org/security/OpenPKG-SA-2006.004-postgresql.html - http://www.securityfocus.com/archive/1/425037/100/0/threaded
CVE ID: CVE-2006-0554 State: PUBLISHED Published: 2006-03-07T02:00:00 Last Updated: 2024-08-07T16:41:27.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6 before 2.6.15.5 allows local users to obtain sensitive information via a crafted XFS ftruncate call, which may return stale data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24999 - http://www.vupen.com/english/advisories/2006/2554 - http://secunia.com/advisories/19220 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:150 - http://www.vupen.com/english/advisories/2006/0804 - http://www.novell.com/linux/security/advisories/200
MDKSA-2006:150 - http://www.vupen.com/english/advisories/2006/0804 - http://www.novell.com/linux/security/advisories/2006-05-31.html - http://www.debian.org/security/2006/dsa-1103 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.5 - http://secunia.com/advisories/20398 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:059 - http://secunia.com/advisories/19083 - https://usn.ubuntu.com/263-1/ - http://www.securityfocus.com/bid/16921 - http://secunia.com/advisories/20914
CVE ID: CVE-2006-0555 State: PUBLISHED Published: 2006-03-07T02:00:00 Last Updated: 2024-08-07T16:41:29.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux Kernel before 2.6.15.5 allows local users to cause a denial of service (NFS client panic) via unknown attack vectors related to the use of O_DIRECT (direct I/O). Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00003.html - http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm - http://www.redhat.com/support/errata/RHSA-2006-0493.html - http://www.vupen.com/english/advisories/2006/2554 - http://secunia.com/advisories/19220 - http
ata/RHSA-2006-0493.html - http://www.vupen.com/english/advisories/2006/2554 - http://secunia.com/advisories/19220 - http://secunia.com/advisories/21745 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25000 - http://www.vupen.com/english/advisories/2006/0804 - http://www.novell.com/linux/security/advisories/2006-05-31.html - http://www.debian.org/security/2006/dsa-1103 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.5 - http://secunia.com/advisories/20237 - http://secunia.com/advisories/20398 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9932 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:059 - http://secunia.com/advi
Aorg.mitre.oval%3Adef%3A9932 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:059 - http://secunia.com/advisories/19083 - http://www.securityfocus.com/bid/16922 - http://secunia.com/advisories/19108 - https://usn.ubuntu.com/263-1/ - http://secunia.com/advisories/20914
CVE ID: CVE-2006-0556 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-0557 State: PUBLISHED Published: 2006-03-12T21:00:00 Last Updated: 2024-08-07T16:41:28.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: sys_mbind in mempolicy.c in Linux kernel 2.6.16 and earlier does not sanity check the maxnod variable before making certain computations for the get_nodes function, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015752 - http://www.vupen.com/english/advisories/2006/2554 - https://usn.ubuntu.com/281-1/ - http://www.osvdb.org/23895 - http://lkml.org/lkml/2006/2/27/355 - http://www.securityfocus.com/bid/16924 - https://exchange.xforce.ib
vdb.org/23895 - http://lkml.org/lkml/2006/2/27/355 - http://www.securityfocus.com/bid/16924 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25204 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=636f13c174dd7c84a437d3c3e8fa66f03f7fda63 - http://www.novell.com/linux/security/advisories/2006-05-31.html - http://secunia.com/advisories/19955 - http://www.debian.org/security/2006/dsa-1103 - http://rhn.redhat.com/errata/RHBA-2007-0304.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=184510 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=636f13c174dd7c84a437d3c3e8fa66f03f7fda63 - http://secunia.com/advi
/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=636f13c174dd7c84a437d3c3e8fa66f03f7fda63 - http://secunia.com/advisories/20398 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:059 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9674 - http://secunia.com/advisories/20914
CVE ID: CVE-2006-0558 State: PUBLISHED Published: 2006-04-14T21:00:00 Last Updated: 2024-08-07T16:41:28.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: perfmon (perfmon.c) in Linux kernel on IA64 architectures allows local users to cause a denial of service (crash) by interrupting a task while another process is accessing the mm_struct, which triggers a BUG_ON action in the put_page_testzero function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19737 - http://www.vupen.com/english/advisories/2006/2554 - http://www.vupen.com/english/advisories/2006/1444 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitr
://www.vupen.com/english/advisories/2006/1444 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10177 - http://www.debian.org/security/2006/dsa-1103 - http://marc.info/?l=linux-ia64&m=113882384921688 - http://secunia.com/advisories/26709 - http://www.redhat.com/support/errata/RHSA-2007-0774.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=185082 - http://www.securityfocus.com/bid/17482 - http://secunia.com/advisories/20914
CVE ID: CVE-2006-0559 State: PUBLISHED Published: 2006-04-04T14:00:00 Last Updated: 2024-08-07T16:41:28.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16742 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25621 - http://www.osvdb.org/24366 - http://www.securityfocus.com/archive/1/429812/100/0/threa
cloud.com/vulnerabilities/25621 - http://www.osvdb.org/24366 - http://www.securityfocus.com/archive/1/429812/100/0/threaded - http://securityreason.com/securityalert/671 - http://securitytracker.com/id?1015861 - http://secunia.com/advisories/19491 - http://www.vupen.com/english/advisories/2006/1219
CVE ID: CVE-2006-0560 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-0561 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T16:41:28.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functions to obtain the plaintext version of the master key. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16743 - http://www.cisco.com/warp/public/707/cisco-sr-20060508-acs.shtml - http://www.symantec.com/enter
tyfocus.com/bid/16743 - http://www.cisco.com/warp/public/707/cisco-sr-20060508-acs.shtml - http://www.symantec.com/enterprise/research/SYMSA-2006-003.txt - http://securitytracker.com/id?1016042 - http://www.osvdb.org/25892 - http://www.vupen.com/english/advisories/2006/1741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26307 - http://www.securityfocus.com/archive/1/433286/100/0/threaded - http://www.securityfocus.com/archive/1/433301/100/0/threaded
CVE ID: CVE-2006-0562 State: PUBLISHED Published: 2006-02-06T23:00:00 Last Updated: 2024-08-07T16:41:28.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in problem.php in PluggedOut Blog 1.9.9c allows remote attackers to inject arbitrary web script or HTML via the data parameter. Additional Analyst Notes: - CVE Program Container: References: - http://hamid.ir/security/pluggedoutblog.txt - http://attrition.org/pipermail/vim/2006-February/000530.html - http://www.vupen.com/english/advisories/2006/0440 - http://secunia.com/advisories/18726 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24482 - http://securitytracker.com/id?1015586
m/advisories/18726 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24482 - http://securitytracker.com/id?1015586 - http://www.securityfocus.com/archive/1/423948/100/0/threaded - http://www.osvdb.org/22927
CVE ID: CVE-2006-0563 State: PUBLISHED Published: 2006-02-06T23:00:00 Last Updated: 2024-08-07T16:41:29.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to execute arbitrary SQL commands via the entryid parameter in a comment_add action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/415 - http://www.osvdb.org/22926 - http://attrition.org/pipermail/vim/2006-February/000531.html - http://hamid.ir/security/pluggedoutblog.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24480 - http://www.vupen.com/english/advisories/2006/04
tblog.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24480 - http://www.vupen.com/english/advisories/2006/0440 - http://secunia.com/advisories/18726 - http://securitytracker.com/id?1015586 - http://www.securityfocus.com/archive/1/423948/100/0/threaded
CVE ID: CVE-2006-0564 State: PUBLISHED Published: 2006-02-06T23:00:00 Last Updated: 2024-08-07T16:41:28.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Microsoft HTML Help Workshop 4.74.8702.0, and possibly earlier versions, and as included in the Microsoft HTML Help 1.4 SDK, allows context-dependent attackers to execute arbitrary code via a .hhp file with a long Contents file field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18740 - http://www.osvdb.org/22941 - http://securitytracker.com/id?1015585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24481 - http://users.pandora.be/bratax/ad
ytracker.com/id?1015585 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24481 - http://users.pandora.be/bratax/advisories/b008.html - http://www.kb.cert.org/vuls/id/124460 - http://www.vupen.com/english/advisories/2006/0446
CVE ID: CVE-2006-0565 State: PUBLISHED Published: 2006-02-06T23:00:00 Last Updated: 2024-08-07T16:41:28.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in inc/backend_settings.php in Loudblog 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the $GLOBALS[path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/410 - http://www.osvdb.org/22921 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24479 - http://retrogod.altervista.org/loudblog_04_incl_xpl.html - http://securityreason.com/securityalert/556 - http://secunia.com/advisories/18722
rvista.org/loudblog_04_incl_xpl.html - http://securityreason.com/securityalert/556 - http://secunia.com/advisories/18722 - http://securitytracker.com/id?1015583 - http://www.securityfocus.com/bid/16495 - http://www.vupen.com/english/advisories/2006/0441 - http://www.securityfocus.com/archive/1/423947/100/0/threaded
CVE ID: CVE-2006-0566 State: PUBLISHED Published: 2006-02-06T23:00:00 Last Updated: 2024-08-07T16:41:28.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP component in CommuniGate Pro Core Server 5.0.7 allows remote attackers to cause a denial of service (application crash) via LDAP messages that contain Distinguished Names (DN) fields with a large number of elements. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18701 - http://www.gleg.net/advisory_cg2.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/24409 - http://www.vupen.com/english/advisories/2006/0444 - http://www.securityfocus.com/archive/1/423968/100/
abilities/24409 - http://www.vupen.com/english/advisories/2006/0444 - http://www.securityfocus.com/archive/1/423968/100/0/threaded - http://securitytracker.com/id?1015587 - http://www.osvdb.org/22932 - http://securityreason.com/securityalert/416 - http://www.stalker.com/CommuniGatePro/History.html
CVE ID: CVE-2006-0567 State: PUBLISHED Published: 2006-02-07T18:00:00 Last Updated: 2024-08-07T16:41:28.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Files Xaraya module before 0.5.1, when the Archive Directory field on the Modify Config page is blank, allows remote attackers to access files outside of the web root via ".." (dot dot) sequences. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24393 - http://xaraya.curtisfarnham.com/articles/Files_0.5.1_-_Security_Fix_and_other_things - http://www.vupen.com/english/advisories/2006/0371
CVE ID: CVE-2006-0568 State: PUBLISHED Published: 2006-02-07T18:00:00 Last Updated: 2024-08-07T16:41:28.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in throw.main in Outblaze allows remote attackers to inject arbitrary web script or HTML via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0439 - http://www.osvdb.org/22909 - http://securityreason.com/securityalert/411 - http://www.securityfocus.com/archive/1/423915/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24476 - http://www.morx.org/outblazeXSS.txt - http://archives.neohapsi
ps://exchange.xforce.ibmcloud.com/vulnerabilities/24476 - http://www.morx.org/outblazeXSS.txt - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0024.html - http://secunia.com/advisories/18710