Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0388 State: PUBLISHED Published: 2006-03-03T22:00:00 Last Updated: 2024-08-07T16:34:14.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to redirect users to local files and execute arbitrary JavaScript via unspecified vectors involving HTTP redirection to local resources. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19064 - http://www.securityfocus.com/bid/16907 - http://securitytracker.com/id?1015713 - http://www.vupen.com/english/advisories/2006/0791 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html -
/www.vupen.com/english/advisories/2006/0791 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25038 - http://docs.info.apple.com/article.html?artnum=303382
CVE ID: CVE-2006-0389 State: PUBLISHED Published: 2006-03-03T22:00:00 Last Updated: 2024-08-07T16:34:14.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Syndication (Safari RSS) in Mac OS X 10.4 through 10.4.5 allows remote attackers to execute arbitrary JavaScript via unspecified vectors involving RSS feeds. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25040 - http://www.osvdb.org/23649 - http://secunia.com/advisories/19064 - http://www.securityfocus.com/bid/16907 - http://www.vupen.com/english/advisories/2006/0791 - http://lists.apple.com/archives/security-ann
tyfocus.com/bid/16907 - http://www.vupen.com/english/advisories/2006/0791 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - http://docs.info.apple.com/article.html?artnum=303382
CVE ID: CVE-2006-0390 State: REJECTED Published: 2006-03-06T20:00:00Z Last Updated: 2024-09-17T01:12:23.070Z Description: No description available.
CVE ID: CVE-2006-0391 State: PUBLISHED Published: 2006-03-03T22:00:00 Last Updated: 2024-08-07T16:34:14.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the BOM framework in Mac OS X 10.x before 10.3.9 and 10.4 before 10.4.5 allows user-assisted attackers to overwrite or create arbitrary files via an archive that is handled by BOMArchiveHelper. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25023 - http://secunia.com/advisories/19064 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=399 - http://www.securityfocus.com/bid/1
ies/19064 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=399 - http://www.securityfocus.com/bid/16907 - http://www.vupen.com/english/advisories/2006/0791 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - http://docs.info.apple.com/article.html?artnum=303382
CVE ID: CVE-2006-0392 State: PUBLISHED Published: 2006-08-03T01:00:00 Last Updated: 2024-08-07T16:34:14.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted Canon RAW image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.kb.cert.org/vuls/id/527236 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techa
1253 - http://www.kb.cert.org/vuls/id/527236 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28142 - http://www.osvdb.org/27739
CVE ID: CVE-2006-0393 State: PUBLISHED Published: 2006-08-03T01:00:00 Last Updated: 2024-08-07T16:34:14.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSH in Apple Mac OS X 10.4.7 allows remote attackers to cause a denial of service or determine account existence by attempting to log in using an invalid user, which causes the server to hang. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - http://www.osvdb.org/27745 - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techale
3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - http://securitytracker.com/id?1016672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28147
CVE ID: CVE-2006-0394 State: REJECTED Published: 2006-03-02T01:00:00Z Last Updated: 2024-09-16T22:08:55.837Z Description: No description available.
CVE ID: CVE-2006-0395 State: PUBLISHED Published: 2006-08-05T01:00:00 Last Updated: 2024-08-07T16:34:14.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Download Validation in Mail in Mac OS X 10.4 does not properly recognize attachment file types to warn a user of an unsafe type, which allows user-assisted remote attackers to execute arbitrary code via crafted file types. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25027 - http://www.osvdb.org/23645 - http://secunia.com/advisories/19064 - http://www.securityfocus.com/bid/16907 - http://www.vupen.com/english/advisories/2006/0791 - http://lists.apple.
19064 - http://www.securityfocus.com/bid/16907 - http://www.vupen.com/english/advisories/2006/0791 - http://lists.apple.com/archives/client-management/2006/Mar/msg00030.html - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - http://docs.info.apple.com/article.html?artnum=303382
CVE ID: CVE-2006-0396 State: PUBLISHED Published: 2006-03-14T11:00:00 Last Updated: 2024-08-07T16:34:14.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Mail in Apple Mac OS X 10.4 up to 10.4.5, when patched with Security Update 2006-001, allows remote attackers to execute arbitrary code via a long Real Name value in an e-mail attachment sent in AppleDouble format, which triggers the overflow when the user double-clicks on an attachment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17081 - http://www.osvdb.org/23872 - http://www.vupen.com/english/advisories/2006/0949 - http://securitytracker.com/id?1015762
- http://www.osvdb.org/23872 - http://www.vupen.com/english/advisories/2006/0949 - http://securitytracker.com/id?1015762 - http://www.kb.cert.org/vuls/id/980084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25209 - http://secunia.com/advisories/19129 - http://www.digitalmunition.com/DMA%5B2006-0313a%5D.txt - http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html - http://docs.info.apple.com/article.html?artnum=303453 - http://www.securityfocus.com/archive/1/427601/100/0/threaded
CVE ID: CVE-2006-0397 State: PUBLISHED Published: 2006-03-14T11:00:00 Last Updated: 2024-08-07T16:34:14.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user into opening an application that appears to be a safe file type. NOTE: due to the lack of specific information in the vendor advisory, it is not clear how CVE-2006-0397, CVE-2006-0398, and CVE-2006-0399 are different. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23869 - http://www.vupen.com/english/advisories/2006/0949 - http://securitytracker.com/id
rences: - http://www.osvdb.org/23869 - http://www.vupen.com/english/advisories/2006/0949 - http://securitytracker.com/id?1015760 - http://secunia.com/advisories/19129 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25269 - http://docs.info.apple.com/article.html?artnum=303453
CVE ID: CVE-2006-0398 State: PUBLISHED Published: 2006-03-14T11:00:00 Last Updated: 2024-08-07T16:34:14.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user into opening an application that appears to be a safe file type. NOTE: due to the lack of specific information in the vendor advisory, it is not clear how CVE-2006-0397, CVE-2006-0398, and CVE-2006-0399 are different. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0949 - http://securitytracker.com/id?1015760 - http://secunia.com
rences: - http://www.vupen.com/english/advisories/2006/0949 - http://securitytracker.com/id?1015760 - http://secunia.com/advisories/19129 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25269 - http://www.osvdb.org/23870 - http://docs.info.apple.com/article.html?artnum=303453
CVE ID: CVE-2006-0399 State: PUBLISHED Published: 2006-03-14T11:00:00 Last Updated: 2024-08-07T16:34:14.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Safari, LaunchServices, and/or CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows attackers to trick a user into opening an application that appears to be a safe file type. NOTE: due to the lack of specific information in the vendor advisory, it is not clear how CVE-2006-0397, CVE-2006-0398, and CVE-2006-0399 are different. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0949 - http://www.osvdb.org/23871 - http://securitytracker.com/id
rences: - http://www.vupen.com/english/advisories/2006/0949 - http://www.osvdb.org/23871 - http://securitytracker.com/id?1015760 - http://secunia.com/advisories/19129 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25269 - http://docs.info.apple.com/article.html?artnum=303453
CVE ID: CVE-2006-0400 State: PUBLISHED Published: 2006-03-14T11:00:00 Last Updated: 2024-08-07T16:34:14.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to bypass the same-origin policy and execute Javascript in other domains via unknown vectors involving "crafted archives." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015763 - http://www.vupen.com/english/advisories/2006/0949 - http://secunia.com/advisories/19129 - http://lists.apple.com/archives/security-announce/2006/Mar/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25208 - http://d
rchives/security-announce/2006/Mar/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25208 - http://docs.info.apple.com/article.html?artnum=303453 - http://www.osvdb.org/23873 - http://www.securityfocus.com/bid/17082
CVE ID: CVE-2006-0401 State: PUBLISHED Published: 2006-04-05T10:00:00 Last Updated: 2024-08-07T16:34:14.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Mac OS X before 10.4.6, when running on an Intel-based computer, allows attackers with physical access to bypass the firmware password and log on in Single User Mode via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25620 - http://www.osvdb.org/24399 - http://securitytracker.com/id?1015859 - http://www.securityfocus.com/bid/17364 - http://docs.info.apple.c
db.org/24399 - http://securitytracker.com/id?1015859 - http://www.securityfocus.com/bid/17364 - http://docs.info.apple.com/article.html?artnum=303567 - http://secunia.com/advisories/19462
CVE ID: CVE-2006-0402 State: PUBLISHED Published: 2006-01-25T02:00:00 Last Updated: 2024-08-07T16:34:14.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Zoph before 0.5pre1 allows remote attackers to execute arbitrary SQL commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22743 - http://secunia.com/advisories/18563 - http://sourceforge.net/project/shownotes.php?group_id=69353&release_id=387320 - http://secunia.com/advisories/19153 - http://www.securityfocus.com/bid/16347 - http://www.vupen.com/english/advisories/2006/0297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24264 - http://www.debian.
vupen.com/english/advisories/2006/0297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24264 - http://www.debian.org/security/2006/dsa-989
CVE ID: CVE-2006-0403 State: PUBLISHED Published: 2006-01-25T02:00:00 Last Updated: 2024-08-07T16:34:14.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) monthy parameter to index.php or (2) login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16344 - http://www.osvdb.org/22701 - http://evuln.com/vulns/43/summary.html - http://www.osvdb.org/22700 - https://exchange.xforce.ibmcl
ww.osvdb.org/22701 - http://evuln.com/vulns/43/summary.html - http://www.osvdb.org/22700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24245 - http://securityreason.com/securityalert/370 - http://securitytracker.com/id?1015524 - http://attrition.org/pipermail/vim/2006-January/000511.html - http://secunia.com/advisories/18567 - http://www.vupen.com/english/advisories/2006/0296 - http://www.securityfocus.com/archive/1/422938/100/0/threaded
CVE ID: CVE-2006-0404 State: PUBLISHED Published: 2006-01-25T02:00:00 Last Updated: 2024-08-07T16:34:14.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Note-A-Day Weblog 2.2 stores sensitive data under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to archive/.phpass-admin, which contains encrypted passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0299 - http://archives.neohapsis.com/archives/bugtraq/2006-01/0389.html - http://securityreason.com/securityalert/371 - http://secunia.com/advisories/18566 - http://securi
aq/2006-01/0389.html - http://securityreason.com/securityalert/371 - http://secunia.com/advisories/18566 - http://securitytracker.com/id?1015539 - http://www.osvdb.org/22699 - http://evuln.com/vulns/44/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24270
CVE ID: CVE-2006-0405 State: PUBLISHED Published: 2006-01-25T02:00:00 Last Updated: 2024-08-07T16:34:14.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFFFetchShortPair function in tif_dirread.c in libtiff 3.8.0 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers a NULL pointer dereference, possibly due to changes in type declarations and/or the TIFFVSetField function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0302 - http://bugzilla.remotesensing.org/show_bug.cgi?id=1029 - http://www.securityfocus.com/bid/18172 - http://www.gentoo.org/security/
gzilla.remotesensing.org/show_bug.cgi?id=1029 - http://www.securityfocus.com/bid/18172 - http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml - http://secunia.com/advisories/20345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24275 - http://bugzilla.remotesensing.org/show_bug.cgi?id=1034 - http://secunia.com/advisories/18587
CVE ID: CVE-2006-0406 State: PUBLISHED Published: 2006-01-25T02:00:00 Last Updated: 2024-08-07T16:34:14.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that reveals the table prefix in a SQL error message, possibly due to invalid parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24272 - http://secunia.com/advisories/18577 - http://www.securityfocus.com/archive/1/422227/100/0/threaded - http://www.osvdb.org/22736
CVE ID: CVE-2006-0407 State: PUBLISHED Published: 2006-01-25T02:00:00 Last Updated: 2024-08-07T16:34:14.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in post.php in AZ Bulletin Board (AZbb) 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) nickname parameter and (2) an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a correction was later provided. NOTE: followup posts have both disputed and confirmed the original claim. Additional Analyst Notes: - CVE Program Container: References: - http://kapda.ir/advisory-236.html - http://www.securityf
dditional Analyst Notes: - CVE Program Container: References: - http://kapda.ir/advisory-236.html - http://www.securityfocus.com/archive/1/423353/100/0/threaded - http://www.securityfocus.com/bid/16351 - http://www.securityfocus.com/archive/1/423363/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24274 - http://www.securityfocus.com/archive/1/427194/100/0/threaded - http://www.securityfocus.com/archive/1/427076/30/6510/threaded - http://www.securityfocus.com/archive/1/427076/100/0/threaded - http://secunia.com/advisories/18565 - http://www.vupen.com/english/advisories/2006/0298
CVE ID: CVE-2006-0408 State: PUBLISHED Published: 2006-01-25T02:00:00 Last Updated: 2024-08-07T16:34:14.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: rsh utility in Sun Grid Engine (SGE) before 6.0u7_1 allows local users to gain privileges and execute arbitrary code via unspecified vectors, possibly involving command line arguments. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24281 - http://gridengine.sunsource.net/project/gridengine/60patches.txt - http://secunia.com/advisories/18580 - http://www.securityfocus.com/bid/16366 - http://securitytracker.com/id?1015531 - http://www.vupen.com/english/adviso
0 - http://www.securityfocus.com/bid/16366 - http://securitytracker.com/id?1015531 - http://www.vupen.com/english/advisories/2006/0308
CVE ID: CVE-2006-0409 State: PUBLISHED Published: 2006-01-25T02:00:00 Last Updated: 2024-08-07T16:34:14.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject arbitrary web script or HTML via the "Add Comment" field in a comment popup. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24261 - http://www.vupen.com/english/advisories/2006/0309 - http://evuln.com/vulns/45/summary.html - http://secunia.com/advisories/18572 - http://www.securityfocus.com/archive/1/42
http://evuln.com/vulns/45/summary.html - http://secunia.com/advisories/18572 - http://www.securityfocus.com/archive/1/423384/100/0/threaded - http://www.securityfocus.com/bid/16362
CVE ID: CVE-2006-0410 State: PUBLISHED Published: 2006-01-25T02:00:00 Last Updated: 2024-08-07T16:34:14.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19590 - http://secunia.com/advisories/19555 - http://www.debian.org/security/2006/dsa-1029 - http://www.vupen.com/english/advisories/2006/0448 - http://www.debian.org/security/2006/dsa-1030 - http://www.vupen.com/english/advisories/2006/0315 - http:
ies/2006/0448 - http://www.debian.org/security/2006/dsa-1030 - http://www.vupen.com/english/advisories/2006/0315 - http://sourceforge.net/project/shownotes.php?release_id=387862&group_id=42718 - http://secunia.com/advisories/18575 - http://secunia.com/advisories/19591 - http://secunia.com/advisories/18745 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24314 - http://secunia.com/advisories/19691 - http://www.debian.org/security/2006/dsa-1031 - http://www.osvdb.org/22705 - http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml - http://www.securityfocus.com/bid/16364 - http://secunia.com/advisories/18732 - http://www.gentoo.org/security/en/glsa/glsa-200602-02.xml
CVE ID: CVE-2006-0411 State: PUBLISHED Published: 2006-01-25T11:00:00 Last Updated: 2024-08-07T16:34:14.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: claro_init_local.inc.php in Claroline 1.7.2 uses guessable session cookies (MD5 hash of connection time), which allows remote attackers to hijack sessions and possibly gain administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/422482 - http://www.securityfocus.com/bid/16341 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24326 - http://secunia.com/advisories/18588 - http://www.vupen.com/english/advisories/2006/0320
CVE ID: CVE-2006-0412 State: PUBLISHED Published: 2006-01-25T11:00:00 Last Updated: 2024-08-07T16:34:14.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CyberShop allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24005 - http://archives.neohapsis.com/archives/bugtraq/2006-01/0064.html - http://www.osvdb.org/22365
CVE ID: CVE-2006-0413 State: PUBLISHED Published: 2006-01-25T11:00:00 Last Updated: 2024-08-07T16:34:14.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands via the (1) discuss, (2) tim, (3) id, (4) last, and (5) limit parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22717 - http://www.securityfocus.com/archive/1/423129/100/0/threaded - http://secunia.com/advisories/18624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24320 - http://www.vupen.com/english/advisories/2006/0341 - http://www.securityfocus.com/bi
ibmcloud.com/vulnerabilities/24320 - http://www.vupen.com/english/advisories/2006/0341 - http://www.securityfocus.com/bid/16339
CVE ID: CVE-2006-0414 State: PUBLISHED Published: 2006-01-25T11:00:00 Last Updated: 2024-08-07T16:34:14.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a large number of accesses of the hidden service, which eventually causes a circuit to be built through the malicious server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19795 - http://secunia.com/advisories/18576 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24285 - http://www.securityfocus.com/bid/18323 - http://www.osvdb.org/22689 - http://secunia.com