Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0598 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:28.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in elogd.c in elog before 2.5.7 r1558-4 allows attackers to execute code via unspecified variables, when writing to the log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16579 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349528 - http://secunia.com/advisories/18783 - http://bugs.debian.org/cgi-bin/bugreport.cgi/0002-r1335-Applied-patch-from-Emiliano-to-fix-possible-buffer-overflow.txt?bug=349528%3Bmsg=15%3Batt=2 - https://exchange.xforce.ibmcloud.c
patch-from-Emiliano-to-fix-possible-buffer-overflow.txt?bug=349528%3Bmsg=15%3Batt=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24705 - http://www.debian.org/security/2006/dsa-967
CVE ID: CVE-2006-0599 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:28.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) elog.c and (2) elogd.c components in elog before 2.5.7 r1558-4 generate different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24706 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349528 - http://secunia.com/advisories/18783 - http://www.debian.org/security/2006/dsa-967 - http://bugs.de
port.cgi?bug=349528 - http://secunia.com/advisories/18783 - http://www.debian.org/security/2006/dsa-967 - http://bugs.debian.org/cgi-bin/bugreport.cgi/0003-r1472-Do-not-distinguish-between-invalid-user-name-and-invalid-password.txt?bug=349528%3Bmsg=15%3Batt=3
CVE ID: CVE-2006-0600 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:28.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: elog before 2.5.7 r1558-4 allows remote attackers to cause a denial of service (infinite redirection) via a request with the fail parameter set to 1, which redirects to the same request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16579 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349528 - http://secunia.com/advisories/18783 - http://savannah.psi.ch/viewcvs/trunk/src/elogd.c?root=elog&rev=1487&view=diff&r1=1487&r2=1486&p1=trunk/src/elogd.c&p2=/trunk/src/elogd.c - http
viewcvs/trunk/src/elogd.c?root=elog&rev=1487&view=diff&r1=1487&r2=1486&p1=trunk/src/elogd.c&p2=/trunk/src/elogd.c - https://exchange.xforce.ibmcloud.com/vulnerabilities/24707 - http://www.debian.org/security/2006/dsa-967
CVE ID: CVE-2006-0602 State: PUBLISHED Published: 2006-02-08T23:00:00 Last Updated: 2024-08-07T16:41:28.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Hinton Design phphg Guestbook 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to check.php or the id parameter to (2) admin/edit_smilie.php, (3) admin/add_theme.php, (4) admin/ban_ip.php, (5) admin/add_lang.php, or (6) admin/edit_filter.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0480 - http://www.securityfocus.com/bid/16541 - http://securitytracker.com/id?1015620 - http:/
m/english/advisories/2006/0480 - http://www.securityfocus.com/bid/16541 - http://securitytracker.com/id?1015620 - http://evuln.com/vulns/58/summary.html - http://secunia.com/advisories/18758 - http://www.securityfocus.com/archive/1/424740/100/0/threaded
CVE ID: CVE-2006-0603 State: PUBLISHED Published: 2006-02-08T23:00:00 Last Updated: 2024-08-07T16:41:29.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting vulnerabilities in signed.php in Hinton Design phphg Guestbook 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) location, (2) website, or (3) message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0480 - http://www.securityfocus.com/bid/16541 - http://securitytracker.com/id?1015620 - http://evuln.com/vulns/58/summary.html - http://secunia.com/advisories/18758 - http://www.securityfocus.com/archiv
620 - http://evuln.com/vulns/58/summary.html - http://secunia.com/advisories/18758 - http://www.securityfocus.com/archive/1/424740/100/0/threaded
CVE ID: CVE-2006-0604 State: PUBLISHED Published: 2006-02-08T23:00:00 Last Updated: 2024-08-07T16:41:28.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which allows remote attackers to gain unauthorized access. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0480 - http://www.securityfocus.com/bid/16541 - http://securitytracker.com/id?1015620 - http://secunia.com/advisories/18758 - http://evuln.com/vulns/58/description.html - http://www.securityfocus.com/archive/1/424740/100/0/threaded
CVE ID: CVE-2006-0605 State: PUBLISHED Published: 2006-02-08T23:00:00 Last Updated: 2024-08-07T16:41:28.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Unknown Domain Shoutbox 2005.07.21 allow remote attackers to inject arbitrary web script or HTML, possibly via the (1) Handle or (2) Message fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/424679/100/0/threaded - http://www.vupen.com/english/advisories/2006/0476 - http://www.securityfocus.com/bid/16543 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24440 - http://secunia.com/advisories/18759 - http://e
/bid/16543 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24440 - http://secunia.com/advisories/18759 - http://evuln.com/vulns/55/summary.html
CVE ID: CVE-2006-0606 State: PUBLISHED Published: 2006-02-08T23:00:00 Last Updated: 2024-08-07T16:41:28.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/424679/100/0/threaded - http://www.vupen.com/english/advisories/2006/0476 - http://www.securityfocus.com/bid/16543 - http://secunia.com/advisories/18759 - http://evuln.com/vulns/55/summary.html
CVE ID: CVE-2006-0607 State: PUBLISHED Published: 2006-02-08T23:00:00 Last Updated: 2024-08-07T16:41:28.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: check.php in Hinton Design phphd 1.0 does not check passwords when certain cookies are provided, which allows remote attackers to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18793 - http://www.securityfocus.com/bid/16586 - http://www.osvdb.org/23026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24510 - http://www.securityfocus.com/archive/1/424827/100/0/threaded - http://www.evuln.com/vulns/60/summary.html
CVE ID: CVE-2006-0608 State: PUBLISHED Published: 2006-02-08T23:00:00 Last Updated: 2024-08-07T16:41:29.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to check.php or (2) unknown attack vectors to scripts that display information from the database. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24515 - http://www.securityfocus.com/bid/16586 - http://www.securityfocus.com/archive/1/424827/100/0/threaded - http://www.o
5 - http://www.securityfocus.com/bid/16586 - http://www.securityfocus.com/archive/1/424827/100/0/threaded - http://www.osvdb.org/23025 - http://www.osvdb.org/23028 - http://www.evuln.com/vulns/60/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24508
CVE ID: CVE-2006-0609 State: PUBLISHED Published: 2006-02-08T23:00:00 Last Updated: 2024-08-07T16:41:28.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in add.php in Hinton Design phphd 1.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23027 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24513 - http://secunia.com/advisories/18793 - http://www.securityfocus.com/bid/16586 - http://www.securityfocus.com/archive/1/424827/100/0/threaded - http://www.evuln.com/vulns/60/summary.html
CVE ID: CVE-2006-0610 State: PUBLISHED Published: 2006-02-09T00:00:00 Last Updated: 2024-08-07T16:41:28.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in 2200net Calendar system 1.2, with gpc_magic_quotes disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the fm_data[id] parameter to calendar.php and (2) the $ad['acc'] variable in adminlogin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24484 - http://www.securityfocus.com/bid/16569 - http://www.evuln.com/vulns
exchange.xforce.ibmcloud.com/vulnerabilities/24484 - http://www.securityfocus.com/bid/16569 - http://www.evuln.com/vulns/62/summary.html - http://www.osvdb.org/23038 - http://secunia.com/advisories/18781 - http://www.securityfocus.com/archive/1/425094/100/0/threaded - http://www.osvdb.org/23037 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24483 - http://marc.info/?l=bugtraq&m=114003781801861&w=2
CVE ID: CVE-2006-0611 State: PUBLISHED Published: 2006-02-09T00:00:00 Last Updated: 2024-08-07T16:41:28.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to arbitrary locations via a .. (dot dot) in the unique parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24459 - http://kb.atmail.com/view_article.php?num=374 - http://www.vupen.com/english/advisories/2006/0415 - http://secunia.com/advisories/18646 - http://www.osvdb.org/2288
74 - http://www.vupen.com/english/advisories/2006/0415 - http://secunia.com/advisories/18646 - http://www.osvdb.org/22882
CVE ID: CVE-2006-0612 State: PUBLISHED Published: 2006-02-09T00:00:00 Last Updated: 2024-08-07T16:41:28.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Powersave daemon before 0.10.15.2 allows local users to gain privileges (unauthorized access to an X session) via unspecified vectors. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=379792&group_id=124576 - http://secunia.com/advisories/18651 - http://www.securityfocus.com/bid/16469 - http://www.vupen.com/english/advisories/2006/0416 -
nia.com/advisories/18651 - http://www.securityfocus.com/bid/16469 - http://www.vupen.com/english/advisories/2006/0416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24458
CVE ID: CVE-2006-0613 State: PUBLISHED Published: 2006-02-09T02:00:00 Last Updated: 2024-08-07T16:41:28.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Java Web Start after 1.0.1_02, as used in J2SE 5.0 Update 5 and earlier, allows remote attackers to obtain privileges via unspecified vectors involving untrusted applications. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16540 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102170-1 - http://secunia.com/advisories/18762 - http://securitytracker.com/id?1015597 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24568 - http://www.kb.
62 - http://securitytracker.com/id?1015597 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24568 - http://www.kb.cert.org/vuls/id/652636 - http://www.vupen.com/english/advisories/2006/1398 - http://www.vupen.com/english/advisories/2006/0468 - http://docs.info.apple.com/article.html?artnum=303658
CVE ID: CVE-2006-0614 State: PUBLISHED Published: 2006-02-09T02:00:00 Last Updated: 2024-08-07T16:41:28.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 3 and earlier, SDK and JRE 1.3.x through 1.3.1_16 and 1.4.x through 1.4.2_08 allows remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the "first issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0828 - http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml - http://securitytracker.com/id?1015596 - http://www.vupen.com/
ttp://www.gentoo.org/security/en/glsa/glsa-200602-07.xml - http://securitytracker.com/id?1015596 - http://www.vupen.com/english/advisories/2006/0467 - http://secunia.com/advisories/18884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24561 - http://secunia.com/advisories/18760 - http://www.kb.cert.org/vuls/id/759996 - http://www.vupen.com/english/advisories/2006/1398 - http://docs.info.apple.com/article.html?artnum=303658 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1
CVE ID: CVE-2006-0615 State: PUBLISHED Published: 2006-02-09T02:00:00 Last Updated: 2024-08-07T16:41:28.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 4 and earlier, SDK and JRE 1.4.x through 1.4.2_09 allow remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the "second and third issues." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0828 - http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml - http://securitytracker.com/id?1015596 - http://www.vupen.com/engli
/www.gentoo.org/security/en/glsa/glsa-200602-07.xml - http://securitytracker.com/id?1015596 - http://www.vupen.com/english/advisories/2006/0467 - http://secunia.com/advisories/18884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24561 - http://secunia.com/advisories/18760 - http://www.kb.cert.org/vuls/id/759996 - http://www.vupen.com/english/advisories/2006/1398 - http://docs.info.apple.com/article.html?artnum=303658 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1
CVE ID: CVE-2006-0616 State: PUBLISHED Published: 2006-02-09T02:00:00 Last Updated: 2024-08-07T16:41:28.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 4 and earlier allows remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the "fourth issue." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0828 - http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml - http://securitytracker.com/id?1015596 - http://www.vupen.com/english/advisories/2006/0467 - http://secunia.com/advisories/1
p://securitytracker.com/id?1015596 - http://www.vupen.com/english/advisories/2006/0467 - http://secunia.com/advisories/18884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24561 - http://secunia.com/advisories/18760 - http://www.kb.cert.org/vuls/id/759996 - http://www.vupen.com/english/advisories/2006/1398 - http://docs.info.apple.com/article.html?artnum=303658 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1
CVE ID: CVE-2006-0617 State: PUBLISHED Published: 2006-02-09T02:00:00 Last Updated: 2024-08-07T16:41:28.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 5 and earlier allow remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the "fifth, sixth, and seventh issues." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0828 - http://www.gentoo.org/security/en/glsa/glsa-200602-07.xml - http://securitytracker.com/id?1015596 - http://www.vupen.com/english/advisories/2006/0467 - h
/glsa/glsa-200602-07.xml - http://securitytracker.com/id?1015596 - http://www.vupen.com/english/advisories/2006/0467 - http://secunia.com/advisories/18884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24561 - http://secunia.com/advisories/18760 - http://www.kb.cert.org/vuls/id/759996 - http://www.vupen.com/english/advisories/2006/1398 - http://docs.info.apple.com/article.html?artnum=303658 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102171-1
CVE ID: CVE-2006-0618 State: PUBLISHED Published: 2006-02-09T02:00:00 Last Updated: 2024-08-07T16:41:28.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in fontsleuth in QNX Neutrino RTOS 6.3.0 allows local users to execute arbitrary code via format string specifiers in the zeroth argument (program name). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24559 - http://www.vupen.com/english/advisories/2006/0474 - http://secunia.com/advisories/18750 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=380 - http://securitytracker.com/id?1015599 - http://www.osvdb.org
fense.com/intelligence/vulnerabilities/display.php?id=380 - http://securitytracker.com/id?1015599 - http://www.osvdb.org/22966 - http://www.securityfocus.com/bid/16539
CVE ID: CVE-2006-0619 State: PUBLISHED Published: 2006-02-09T02:00:00 Last Updated: 2024-08-07T16:41:28.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in QNX Neutrino RTOS 6.3.0 allow local users to execute arbitrary code via long (1) ABLPATH or (2) ABLANG environment variables in the libAP library (libAp.so.2) or (3) a long PHOTON_PATH environment variable to the setitem function in the libph library. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=381 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=382 - http://www.vupen.com/engli
isplay.php?id=381 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=382 - http://www.vupen.com/english/advisories/2006/0474 - http://secunia.com/advisories/18750 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24557 - http://securitytracker.com/id?1015599 - http://www.osvdb.org/22964 - http://www.osvdb.org/22965 - http://www.securityfocus.com/bid/16539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24558
CVE ID: CVE-2006-0620 State: PUBLISHED Published: 2006-02-09T02:00:00 Last Updated: 2024-08-07T16:41:28.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in phfont in QNX Neutrino RTOS 6.2.1 allows local users to execute arbitrary code via unspecified manipulations of the PHFONT and PHOTON2_PATH environment variables. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24555 - http://www.vupen.com/english/advisories/2006/0474 - http://secunia.com/advisories/18750 - http://securitytracker.com/id?1015599 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=383 - http://www.securityfo
tracker.com/id?1015599 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=383 - http://www.securityfocus.com/bid/16539 - http://www.osvdb.org/22963
CVE ID: CVE-2006-0621 State: PUBLISHED Published: 2006-02-09T02:00:00 Last Updated: 2024-08-07T16:41:28.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 allow local users to execute arbitrary code via a long first argument to the (1) su or (2) passwd commands. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24554 - http://www.vupen.com/english/advisories/2006/0474 - http://secunia.com/advisories/18750 - http://www.osvdb.org/22961 - http://www.osvdb.org/22959 - http://securitytracker.com/id?1015599 - http://www.idefense.com/intelligence/vulnerabilities/disp
/www.osvdb.org/22959 - http://securitytracker.com/id?1015599 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=388 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=385 - http://www.securityfocus.com/bid/16539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24551
CVE ID: CVE-2006-0622 State: PUBLISHED Published: 2006-02-09T02:00:00 Last Updated: 2024-08-07T16:41:28.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: QNX Neutrino RTOS 6.3.0 allows local users to cause a denial of service (hang) by supplying a "break *0xb032d59f" command to gdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24553 - http://www.vupen.com/english/advisories/2006/0474 - http://secunia.com/advisories/18750 - http://securitytracker.com/id?1015598 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=386 - http://www.securityfocus.com/bid/16539 - http://www.osvdb.org/22960
CVE ID: CVE-2006-0623 State: PUBLISHED Published: 2006-02-09T02:00:00 Last Updated: 2024-08-07T16:41:29.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, which allows local users to modify the file and execute arbitrary code at system startup. Additional Analyst Notes: - CVE Program Container: References: - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24552 - http://www.vupen.com/english/advisories/2006/0474 - http://secunia.com/advisories/18750 - http://securitytracker.com/id?1015598 - http://www.osvdb.org/22958 - h
2006/0474 - http://secunia.com/advisories/18750 - http://securitytracker.com/id?1015598 - http://www.osvdb.org/22958 - http://www.securityfocus.com/bid/16539
CVE ID: CVE-2006-0624 State: PUBLISHED Published: 2006-02-09T02:00:00 Last Updated: 2024-08-07T16:41:28.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in check.asp in Whomp Real Estate Manager XP 2005 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22969 - http://secunia.com/advisories/18780 - http://www.vupen.com/english/advisories/2006/0489 - http://securityreason.com/securityalert/418 - http://www.securityfocus.com/archive/1/424389/100/0/threaded - http://www.securityfocus.com/bid/16544 - https://exch
8 - http://www.securityfocus.com/archive/1/424389/100/0/threaded - http://www.securityfocus.com/bid/16544 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24592