Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
- http://www.osvdb.org/24069 - http://secunia.com/advisories/19332 - http://www.vupen.com/english/advisories/2006/1073 - http://securitytracker.com/id?1015822 - http://www.securityfocus.com/bid/17210
CVE ID: CVE-2006-1385 State: PUBLISHED Published: 2006-03-24T11:00:00 Last Updated: 2024-08-07T17:12:21.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute arbitrary code via multiple SSIDs in a Cisco vendor tag in a 802.11 management frame. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24072 - http://securityreason.com/securityalert/609 - http://www.vupen.com/english/advisories/2006/1070 - http://kismac.de/_trac/changeset/113 - http://www.securityfocus.com/bid/17198 - https://exchange.xforce.ibmcloud.co
70 - http://kismac.de/_trac/changeset/113 - http://www.securityfocus.com/bid/17198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25422 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044323.html - http://www.securityfocus.com/archive/1/428537/100/0/threaded - http://www.hardened-php.net/advisory_032006.115.html - http://secunia.com/advisories/19354
CVE ID: CVE-2006-1386 State: PUBLISHED Published: 2006-03-26T22:00:00 Last Updated: 2024-08-07T17:12:21.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25444 - http://www.securityfocus.com/bid/17268 - http://secunia.com/advisories/19410 - http://securitytracker.com/id?1015843 - http://www.vupen.com/english/advisories/2006/1116 - http://twiki.org/cgi-bin/view/Codev/Secu
itytracker.com/id?1015843 - http://www.vupen.com/english/advisories/2006/1116 - http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess
CVE ID: CVE-2006-1387 State: PUBLISHED Published: 2006-03-26T22:00:00 Last Updated: 2024-08-07T17:12:20.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit rights to cause a denial of service (infinite recursion leading to CPU and memory consumption) via INCLUDE by URL statements that form a loop, such as a page that includes itself. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19410 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25445 - http://twiki.org/cgi-bin/view/Codev/SecurityAdvisoryDosAttackWithInclude - http://www.vupen.com/
vulnerabilities/25445 - http://twiki.org/cgi-bin/view/Codev/SecurityAdvisoryDosAttackWithInclude - http://www.vupen.com/english/advisories/2006/1116 - http://www.securityfocus.com/bid/17267
CVE ID: CVE-2006-1388 State: PUBLISHED Published: 2006-03-24T20:00:00 Last Updated: 2024-08-07T17:12:21.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1591 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25394 - http://secunia.com/advisories/19378 - http://www.kb.cert.org/vuls/id/434641 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1642 - https://oval.
/id/434641 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1642 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1774 - http://www.us-cert.gov/cas/techalerts/TA06-101A.html - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1415.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1676 - http://news.zdnet.com/2100-1009_22-6052396.html?tag=zdfd.newsfeed - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 - http://www.securityfocus.com/bid/17181 - http://jeffrey.vanderstad.net/grasshopper/ - http://securitytracker.com/id?1015800
://www.securityfocus.com/bid/17181 - http://jeffrey.vanderstad.net/grasshopper/ - http://securitytracker.com/id?1015800 - http://www.osvdb.org/24095 - http://www.vupen.com/english/advisories/2006/1318 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1724
CVE ID: CVE-2006-1389 State: PUBLISHED Published: 2006-03-25T00:00:00 Last Updated: 2024-08-07T17:12:21.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in swagentd in HP-UX B.11.00, B.11.04, and B.11.11 allows remote attackers to cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19373 - http://secunia.com/advisories/19395 - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00622788 - http://www.vupen.com/english/advisories/2006/1089 - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00622788 - http://www.securityfocus.com
/advisories/2006/1089 - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00622788 - http://www.securityfocus.com/bid/17215 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A616 - http://support.avaya.com/elmodocs2/security/ASA-2006-076.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25421 - http://securitytracker.com/id?1015819 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A312 - http://www.osvdb.org/24097
CVE ID: CVE-2006-1390 State: PUBLISHED Published: 2006-03-25T00:00:00 Last Updated: 2024-08-07T17:12:21.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to modify saved games files to execute arbitrary code via buffer overflows and overwrite arbitrary files via symlink attacks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19376 - http://www.gentoo.org/security/en/glsa/glsa-200603-23.xml - http://bugs.gentoo.org/show_bug.cgi?id=125902 - http://bugs.gentoo.org/s
entoo.org/security/en/glsa/glsa-200603-23.xml - http://bugs.gentoo.org/show_bug.cgi?id=125902 - http://bugs.gentoo.org/show_bug.cgi?id=127167 - http://bugs.gentoo.org/show_bug.cgi?id=127319 - http://www.securityfocus.com/archive/1/428739/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25528 - http://www.securityfocus.com/archive/1/428743/100/0/threaded - http://bugs.gentoo.org/show_bug.cgi?id=122376 - http://www.osvdb.org/24104 - http://www.securityfocus.com/bid/17217
CVE ID: CVE-2006-1391 State: PUBLISHED Published: 2006-03-25T00:00:00 Last Updated: 2024-08-07T17:12:20.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (a) Quick 'n Easy Web Server before 3.1.1 and (b) Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via (1) . (dot) and (2) space characters in the extension of a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17222 - http://secunia.com/advisories/19312 - http://www.securityfocus.com/archive/1/428667/100/0/threaded - http://www.vupen.com/english/advisories/2006/1085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25418 - h
ded - http://www.vupen.com/english/advisories/2006/1085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25418 - http://www.osvdb.org/24100 - http://www.osvdb.org/24099 - http://securityreason.com/securityalert/624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25417 - http://secunia.com/advisories/19306 - http://secunia.com/secunia_research/2006-19/advisory/ - http://www.vupen.com/english/advisories/2006/1088
CVE ID: CVE-2006-1392 State: PUBLISHED Published: 2006-03-26T23:00:00 Last Updated: 2024-08-07T17:12:21.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in the login server in University of Washington Pubcookie 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified inputs. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25427 - http://www.osvdb.org/24521 - http://pubcookie.org/news/20060306-login-secadv.html - http://www.kb.cert.org/vuls/id/337585 - http://www.
b.org/24521 - http://pubcookie.org/news/20060306-login-secadv.html - http://www.kb.cert.org/vuls/id/337585 - http://www.securityfocus.com/bid/17221 - http://secunia.com/advisories/19348
CVE ID: CVE-2006-1393 State: PUBLISHED Published: 2006-03-26T23:00:00 Last Updated: 2024-08-07T17:12:21.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the mod_pubcookie Apache application server module in University of Washington Pubcookie 1.x, 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://pubcookie.org/news/20060306-apps-secadv.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25426 - http://www.osvdb.org/24103 - http://www.securit
cadv.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25426 - http://www.osvdb.org/24103 - http://www.securityfocus.com/bid/17221 - http://www.kb.cert.org/vuls/id/314540 - http://secunia.com/advisories/19348
CVE ID: CVE-2006-1394 State: PUBLISHED Published: 2006-03-26T23:00:00 Last Updated: 2024-08-07T17:12:20.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the Microsoft IIS ISAPI filter (aka application server module) in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://pubcookie.org/news/20060306-apps-secadv.html - http://www.osvdb.org/24520 - http://www.securityfocus.com/bid/17221 - http://www.kb.cert.org/vuls/id/314540
cadv.html - http://www.osvdb.org/24520 - http://www.securityfocus.com/bid/17221 - http://www.kb.cert.org/vuls/id/314540 - http://secunia.com/advisories/19348
CVE ID: CVE-2006-1395 State: PUBLISHED Published: 2006-03-26T23:00:00 Last Updated: 2024-08-07T17:12:20.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action, possibly the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25520 - http://www.vupen.com/english/advisories/2006/1
ries/19439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25520 - http://www.vupen.com/english/advisories/2006/1153 - http://www.securityfocus.com/bid/17224
CVE ID: CVE-2006-1396 State: PUBLISHED Published: 2006-03-26T23:00:00 Last Updated: 2024-08-07T17:12:21.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Cholod MySQL Based Message Board allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25518 - http://www.vupen.com/english/advisories/2006/1153 - http://www.securityfocus.com/bid/1722
ud.com/vulnerabilities/25518 - http://www.vupen.com/english/advisories/2006/1153 - http://www.securityfocus.com/bid/17223
CVE ID: CVE-2006-1397 State: PUBLISHED Published: 2006-03-28T11:00:00 Last Updated: 2024-08-07T17:12:21.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (a) phpAdsNew and (b) phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) certain parameters to the banner delivery module, which is not properly handled in the administrator interface, or (2) certain parameters to the login form. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25458 - http://sourceforge.net/project/shownotes.php?release_id=404964 - http://secu
xforce.ibmcloud.com/vulnerabilities/25458 - http://sourceforge.net/project/shownotes.php?release_id=404964 - http://secunia.com/advisories/19384 - http://www.osvdb.org/24206 - http://securityreason.com/securityalert/633 - http://www.vupen.com/english/advisories/2006/1107 - http://www.securityfocus.com/bid/17251 - http://phpadsnew.com/two/nucleus/index.php?itemid=46 - http://www.securityfocus.com/archive/1/428898/100/0/threaded - http://www.osvdb.org/24205 - http://securitytracker.com/id?1015829 - http://securitytracker.com/id?1015828 - http://sourceforge.net/project/shownotes.php?release_id=404963
CVE ID: CVE-2006-1398 State: PUBLISHED Published: 2006-03-28T11:00:00 Last Updated: 2024-08-07T17:12:21.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in guestbook.php in G-Book 1.0 allows remote attackers to inject arbitrary web script or HTML via the g_message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17253 - http://secunia.com/advisories/19414 - http://www.osvdb.org/24141 - http://securitytracker.com/id?1015830 - http://securityreason.com/securityalert/634 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25475 - http://www.securityfocus.com/archive/1/428900/10
lert/634 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25475 - http://www.securityfocus.com/archive/1/428900/100/0/threaded - http://www.h4cky0u.org/advisories/HYSA-2006-006-g-book.txt - http://www.vupen.com/english/advisories/2006/1100
CVE ID: CVE-2006-1399 State: PUBLISHED Published: 2006-03-28T11:00:00 Last Updated: 2024-08-07T17:12:20.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in searchresult.php in Meeting Reserve 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the search_term parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25432 - http://www.osvdb.org/24162 - http://www.vupen.com/english/advisories/2006/
e.xforce.ibmcloud.com/vulnerabilities/25432 - http://www.osvdb.org/24162 - http://www.vupen.com/english/advisories/2006/1110 - http://secunia.com/advisories/19372
CVE ID: CVE-2006-1400 State: PUBLISHED Published: 2006-03-28T11:00:00 Last Updated: 2024-08-07T17:12:20.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MyTasks/PersonalTaskEdit.asp in Metisware Instructor 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Task parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19385 - http://www.osvdb.org/24139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25490 - http://www.securityfocus.com/bid/17234 - http://pridels0.blogspot.com/2006/03/metisware-instructor-xss-vuln.html - http://www.vupen.com/eng
focus.com/bid/17234 - http://pridels0.blogspot.com/2006/03/metisware-instructor-xss-vuln.html - http://www.vupen.com/english/advisories/2006/1112
CVE ID: CVE-2006-1401 State: PUBLISHED Published: 2006-03-28T11:00:00 Last Updated: 2024-08-07T17:12:20.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in search.php in Calendar Express 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) allwords or (2) oneword parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17240 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25467 - http://secunia.com/advisories/19393 - http://www.vupen.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/25467 - http://secunia.com/advisories/19393 - http://www.vupen.com/english/advisories/2006/1109 - http://www.osvdb.org/24161
CVE ID: CVE-2006-1402 State: PUBLISHED Published: 2006-03-28T11:00:00 Last Updated: 2024-08-07T17:12:21.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in client/server Doom (csDoom) 0.7 and earlier allows remote attackers to (1) cause a denial of service via a long nickname or teamname to the SV_SetupUserInfo function or (2) execute arbitrary code via a long string sent when joining a match or a long chat message to the SV_BroadcastPrintf function. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/csdoombof-adv.txt - http://www.vupen.com/english/advisories/2006/1105 - http://secunia.com/advisories/19389 - https:
adv/csdoombof-adv.txt - http://www.vupen.com/english/advisories/2006/1105 - http://secunia.com/advisories/19389 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25449 - http://www.securityfocus.com/bid/17248 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25448 - http://voxelsoft.com/csdoom/
CVE ID: CVE-2006-1403 State: PUBLISHED Published: 2006-03-28T11:00:00 Last Updated: 2024-08-07T17:12:20.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the PrintString function in c_console.cpp in client/server Doom (csDoom) 0.7 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via format string specifiers in strings passed to the console. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/csdoombof-adv.txt - http://www.vupen.com/english/advisories/2006/1105 - http://secunia.com/advisories/19389 - http://www.securityfocus.com/bid/17248 - http://
om/english/advisories/2006/1105 - http://secunia.com/advisories/19389 - http://www.securityfocus.com/bid/17248 - http://voxelsoft.com/csdoom/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/25450
CVE ID: CVE-2006-1404 State: PUBLISHED Published: 2006-03-28T11:00:00 Last Updated: 2024-08-07T17:12:21.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in bol.cgi in BlankOL 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) file or (2) function parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25488 - http://www.vupen.com/english/advisories/2006/1111 - http://www.osvdb.org/24124 - http://secunia.com/advisories/19387 - http://www.securityfocus.com/bid/17265 - http://pridels0.blogspot.com/2006/03/blankol-xss-v
cunia.com/advisories/19387 - http://www.securityfocus.com/bid/17265 - http://pridels0.blogspot.com/2006/03/blankol-xss-vuln.html
CVE ID: CVE-2006-1405 State: PUBLISHED Published: 2006-03-28T11:00:00 Last Updated: 2024-08-07T17:12:21.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.aspx in SweetSuite.NET Content Management System (ssCMS) 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25452 - http://www.securityfocus.com/bid/17254 - http://www.vupen.com/english/advisories/2006/1097 - http://secunia.com/advisories/19399 - http://www.osvdb.org/24120 - http://pridels0.blogspot.com/
/advisories/2006/1097 - http://secunia.com/advisories/19399 - http://www.osvdb.org/24120 - http://pridels0.blogspot.com/2006/03/sweetsuitenet-sscms-21x-xss-vuln.html
CVE ID: CVE-2006-1406 State: PUBLISHED Published: 2006-03-28T11:00:00 Last Updated: 2024-08-07T17:12:22.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in wbadmlog.aspx in uniForum 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) txtuser or (2) txtpassword parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/03/uniforum-xss-vuln.html - http://www.vupen.com/english/advisories/2006/1101 - http://www.securityfocus.com/bid/17245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25433 - http://www.osvdb.org/24123 - http://secun
s.com/bid/17245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25433 - http://www.osvdb.org/24123 - http://secunia.com/advisories/19397
CVE ID: CVE-2006-1407 State: PUBLISHED Published: 2006-03-28T11:00:00 Last Updated: 2024-08-07T17:12:21.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) txtDomainName parameter to domains.asp or (2) SearchText or (3) UserLevel parameters to default.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1093 - http://www.osvdb.org/24125 - http://www.osvdb.org/24126 - http://secunia.com/advisories/19375 - http://pridels0.blogspot.com/2006/03/he
b.org/24125 - http://www.osvdb.org/24126 - http://secunia.com/advisories/19375 - http://pridels0.blogspot.com/2006/03/helm-web-hosting-control-panel-xss.html - http://www.securityfocus.com/bid/17263 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25470 - http://attrition.org/pipermail/vim/2006-March/000654.html
CVE ID: CVE-2006-1408 State: PUBLISHED Published: 2006-03-28T11:00:00 Last Updated: 2024-08-07T17:12:22.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via (1) a packet with no data or (2) a large packet, which prevents Vavoom from discarding the packet from the socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1104 - http://secunia.com/advisories/19388 - http://aluigi.altervista.org/adv/vaboom-adv.txt - http://www.securityfocus.com/bid/17261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25454
CVE ID: CVE-2006-1409 State: PUBLISHED Published: 2006-03-28T11:00:00 Last Updated: 2024-08-07T17:12:21.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service (application crash) via an invalid comprLength value in a compressed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1104 - http://secunia.com/advisories/19388 - http://aluigi.altervista.org/adv/vaboom-adv.txt - http://www.securityfocus.com/bid/17261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25455