Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
book-sqlxss.txt - http://www.securityfocus.com/archive/1/435306/100/0/threaded - http://osvdb.org/50345 - http://www.securityfocus.com/archive/1/435196/100/0/threaded - http://securitytracker.com/id?1016182 - http://securityreason.com/securityalert/1008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26873 - http://www.securityfocus.com/bid/18118
CVE ID: CVE-2006-2758 State: PUBLISHED Published: 2006-06-02T01:00:00 Last Updated: 2024-08-07T17:58:52.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL. NOTE: this might be the same issue as CVE-2005-3747. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016168
CVE ID: CVE-2006-2759 State: PUBLISHED Published: 2006-06-02T01:00:00Z Last Updated: 2024-09-16T19:00:53.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016168
CVE ID: CVE-2006-2760 State: PUBLISHED Published: 2006-06-02T01:00:00 Last Updated: 2024-08-07T17:58:52.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules.php in 4nNukeWare 4nForum 0.91 allows remote attackers to execute arbitrary SQL commands via the tid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435363/30/0/threaded - http://www.securityfocus.com/bid/18184 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26729 - http://www.vupen.com/english/advisories/2006/2061 - http://osvdb.org/31059 - http://secunia.com/advisories/20374
CVE ID: CVE-2006-2761 State: PUBLISHED Published: 2006-06-02T01:00:00 Last Updated: 2024-08-07T17:58:51.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Hitachi HITSENSER3 HITSENSER3/PRP, HITSENSER3/PUP, HITSENSER3/STP, and HITSENSER3/EUP allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2063 - http://securitytracker.com/id?1016190 - http://www.securityfocus.com/bid/18181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26749 - http://secunia.com/advisories/20347 - http://www.hitachi-support.com/s
hange.xforce.ibmcloud.com/vulnerabilities/26749 - http://secunia.com/advisories/20347 - http://www.hitachi-support.com/security_e/vuls_e/HS06-011_e/index-e.html
CVE ID: CVE-2006-2762 State: PUBLISHED Published: 2006-06-02T01:00:00 Last Updated: 2024-08-07T17:58:51.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter, which is remotely accessed in an fopen call whose results are used to define a user_inc setting that is used in an include_once call. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016179 - http://secunia.com/advisories/20542 - http://www.securityfocus.com/bid/18175 - http://www.debian.org/security/2006/d
9 - http://secunia.com/advisories/20542 - http://www.securityfocus.com/bid/18175 - http://www.debian.org/security/2006/dsa-1096 - http://www.securityfocus.com/archive/1/436263/100/0/threaded - http://www.osvdb.org/25842 - http://secunia.com/advisories/20367 - http://www.vupen.com/english/advisories/2006/2067 - http://www.securityfocus.com/archive/1/435379 - http://securityreason.com/securityalert/1019
CVE ID: CVE-2006-2763 State: PUBLISHED Published: 2006-06-02T01:00:00 Last Updated: 2024-08-07T17:58:51.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) index.php, and the (2) nid parameter to (b) news_detail.php, (c) email_story.php, (d) thankyou.php, (e) printable_view.php, (f) tella_friend.php, and (g) send_comments.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. It is possible that this is primary to CVE-2006-2678. Additional Analyst Notes: - CVE Program Containe
arty information. It is possible that this is primary to CVE-2006-2678. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/34035 - http://www.osvdb.org/26077 - http://www.osvdb.org/26079 - http://www.osvdb.org/26074 - http://www.vupen.com/english/advisories/2006/1990 - http://secunia.com/advisories/20284 - http://www.securityfocus.com/archive/1/497185/100/0/threaded - http://www.securityfocus.com/archive/1/493369/100/0/threaded - https://www.exploit-db.com/exploits/5803 - http://www.osvdb.org/26078 - http://www.osvdb.org/26073 - http://www.osvdb.org/26076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43070 - http://w
www.osvdb.org/26073 - http://www.osvdb.org/26076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/43070 - http://www.osvdb.org/26075 - http://www.securityfocus.com/archive/1/497219/100/0/threaded
CVE ID: CVE-2006-2764 State: PUBLISHED Published: 2006-06-02T01:00:00 Last Updated: 2024-08-07T17:58:52.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in GuestbookXL 1.3 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in an IMG tag in a comment field to (1) guestwrite.php or (2) guestbook.php. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2006-05/0526.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26689 - http://securityreason.com/securityalert/1017
CVE ID: CVE-2006-2765 State: PUBLISHED Published: 2006-06-02T01:00:00 Last Updated: 2024-08-07T17:58:51.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in news_information.php in Interlink Advantage allows remote attackers to inject arbitrary web script or HTML via the flag parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1016 - http://www.attrition.org/pipermail/vim/2006-June/000804.html - http://archives.neohapsis.com/archives/bugtraq/2006-05/0395.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26615
CVE ID: CVE-2006-2766 State: PUBLISHED Published: 2006-06-02T10:00:00 Last Updated: 2024-08-07T17:58:51.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service (application crash) via a long mhtml URI in the URL value in a URL file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435492/100/0/threaded - http://www.kb.cert.org/vuls/id/891204 - http://secunia.com/advisories/20384 - http://www.vupen.com/englis
0/0/threaded - http://www.kb.cert.org/vuls/id/891204 - http://secunia.com/advisories/20384 - http://www.vupen.com/english/advisories/2006/2088 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26810 - http://www.osvdb.org/25949 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A441 - http://securitytracker.com/id?1016654 - http://www.securityfocus.com/archive/1/435609/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-043 - http://www.us-cert.gov/cas/techalerts/TA06-220A.html - http://www.securityfocus.com/bid/18198 - http://www.securityfocus.com/archive/1/435616/100/0/threaded
CVE ID: CVE-2006-2767 State: PUBLISHED Published: 2006-06-02T10:00:00 Last Updated: 2024-08-07T17:58:52.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Ottoman 1.1.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the default_path parameter in (1) error.php, (2) index.php, and (3) classes/main_class.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18208 - http://secunia.com/advisories/20399 - http://www.vupen.com/english/advisories/2006/2073 - https://www.exploit-db.com/exploits/1854 - http://www.osvdb.org/25916 - http://www.osvdb.org/2
sh/advisories/2006/2073 - https://www.exploit-db.com/exploits/1854 - http://www.osvdb.org/25916 - http://www.osvdb.org/25917 - http://www.osvdb.org/25918 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26894
CVE ID: CVE-2006-2768 State: PUBLISHED Published: 2006-06-02T10:00:00 Last Updated: 2024-08-07T17:58:52.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in METAjour 2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the (1) system_path parameter in a large number of files in the (a) app/edocument/, (b) app/eproject/, (c) app/erek/, and (d) extension/ directories, and the (2) GLOBALS[system_path] parameter in (e) extension/sitemap/sitemap.datatype.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2077 - https://exchange.xforce.ib
s: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26892 - http://secunia.com/advisories/20404 - http://www.securityfocus.com/bid/18211 - https://www.exploit-db.com/exploits/1855
CVE ID: CVE-2006-2769 State: PUBLISHED Published: 2006-06-02T10:00:00 Last Updated: 2024-08-07T17:58:52.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return (\r) after the URL and before the HTTP declaration. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435872/100/0/threaded - http://www.securityfocus.com/archive/1/435734/100/0/threaded - http://www.demarc.com/support/downloads/patch_20060531 - http://secunia.com/advisories/20766 - http://www.securityfocus.com/bid/18200 - http
m/support/downloads/patch_20060531 - http://secunia.com/advisories/20766 - http://www.securityfocus.com/bid/18200 - http://secunia.com/advisories/20413 - http://www.securityfocus.com/archive/1/435600/100/0/threaded - http://www.vupen.com/english/advisories/2006/2119 - http://securityreason.com/securityalert/1018 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26855 - http://www.osvdb.org/25837 - http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html - http://securitytracker.com/id?1016191 - http://marc.info/?l=snort-devel&m=114909074311462&w=2 - http://www.snort.org/pub-bin/snortnews.cgi#431 - http://www.securityfocus.com/archive/1/435797/100/0/threaded
CVE ID: CVE-2006-2770 State: PUBLISHED Published: 2006-06-02T10:00:00 Last Updated: 2024-08-07T17:58:52.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in randompic.php in pppBLOG 0.3.8 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) sequence in an index of the "file" array parameter, as demonstrated by file[0]. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/pppblog_038_xpl.html - http://www.securityfocus.com/bid/18189 - http://secunia.com/advisories/20375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26969 - http://www.
d/18189 - http://secunia.com/advisories/20375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26969 - http://www.securityfocus.com/archive/1/435406/100/0/threaded - http://securityreason.com/securityalert/1015 - http://www.vupen.com/english/advisories/2006/2085 - http://securitytracker.com/id?1016198
CVE ID: CVE-2006-2771 State: PUBLISHED Published: 2006-06-02T10:00:00 Last Updated: 2024-08-07T17:58:52.248Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/radera/tabort.asp in Hogstorps hogstorp guestbook 2.0 does not verify user credentials, which allows remote attackers to delete arbitrary posts via a modified delID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://colander.altervista.org/advisory/HTGuestBook2.txt - http://www.vupen.com/english/advisories/2006/2082 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26979 - http://secunia.com/advisories/20402 - http://www.securityfocus.com/bid/18205
CVE ID: CVE-2006-2772 State: PUBLISHED Published: 2006-06-02T10:00:00 Last Updated: 2024-08-07T17:58:51.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in add.asp in Hogstorps hogstorp guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) headline parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2082 - http://www.securityfocus.com/bid/18203 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
glish/advisories/2006/2082 - http://www.securityfocus.com/bid/18203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26980 - http://secunia.com/advisories/20402
CVE ID: CVE-2006-2773 State: PUBLISHED Published: 2006-06-02T10:00:00 Last Updated: 2024-08-07T17:58:52.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/redigera/redigera2.asp in Hogstorps hogstorp Guestbook 2.0 does not verify user credentials, which allows remote attackers to edit arbitrary posts via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2082 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26979 - http://secunia.com/advisories/20402
CVE ID: CVE-2006-2774 State: PUBLISHED Published: 2006-06-02T10:00:00 Last Updated: 2024-08-07T17:58:51.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in QontentOne CMS allows remote attackers to inject arbitrary web script or HTML via the search_phrase parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435409/100/0/threaded - http://securitytracker.com/id?1016195 - http://www.vupen.com/english/advisories/2006/2080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26835 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0685.html - http://www.secu
.ibmcloud.com/vulnerabilities/26835 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0685.html - http://www.securityfocus.com/bid/18209 - http://secunia.com/advisories/20392
CVE ID: CVE-2006-2775 State: PUBLISHED Published: 2006-06-02T18:00:00 Last Updated: 2024-08-07T17:58:51.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified circumstances, which might allow remote attackers to bypass restrictions by causing a persisted string to be associated with the wrong URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20709 - http://secunia.com/advisories/21176 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.vupen.com/english/advisories/2006/3748 - https://usn.ubu
ndriva.com/security/advisories?name=MDKSA-2006:145 - http://www.vupen.com/english/advisories/2006/3748 - https://usn.ubuntu.com/297-3/ - https://usn.ubuntu.com/296-1/ - https://usn.ubuntu.com/323-1/ - http://secunia.com/advisories/20561 - http://www.mozilla.org/security/announce/2006/mfsa2006-35.html - http://www.us-cert.gov/cas/techalerts/TA06-153A.html - http://secunia.com/advisories/21210 - http://secunia.com/advisories/20382 - http://securitytracker.com/id?1016214 - http://www.securityfocus.com/archive/1/435795/100/0/threaded - http://www.vupen.com/english/advisories/2006/3749 - http://secunia.com/advisories/20376 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 - http:/
06/3749 - http://secunia.com/advisories/20376 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 - http://secunia.com/advisories/21178 - http://securitytracker.com/id?1016202 - http://secunia.com/advisories/21607 - http://www.securityfocus.com/bid/18228 - http://secunia.com/advisories/21532 - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/21188 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.securityfocus.com/archive/1/446657/100/200/threaded - https://usn.ubuntu.com/296-2/ - http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml - http://www.debian.org/security/2006/dsa-1118 - http://www.securityfocus.com/arc
rg/security/en/glsa/glsa-200606-21.xml - http://www.debian.org/security/2006/dsa-1118 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.kb.cert.org/vuls/id/243153 - http://www.debian.org/security/2006/dsa-1120 - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://www.debian.org/security/2006/dsa-1134 - http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml - http://secunia.com/advisories/21324 - http://secunia.com/advisories/21183 - http://secunia.com/advisories/22066 - http://www.novell.com/linux/security/advisories/2006_35_mozilla.html - https://usn.ubuntu.com/297-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/26846 - http://www
5_mozilla.html - https://usn.ubuntu.com/297-1/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/26846 - http://www.vupen.com/english/advisories/2006/2106 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - http://secunia.com/advisories/22065
CVE ID: CVE-2006-2776 State: PUBLISHED Published: 2006-06-02T18:00:00 Last Updated: 2024-08-07T17:58:52.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object prototype, which allows remote attackers to execute code at a higher privilege than intended. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102800-1 - http://secunia.com/advisories/20709 - http://secunia.com/advisories/21176 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.vupen.com/english/advisories/200
es/21176 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.vupen.com/english/advisories/2006/3748 - https://usn.ubuntu.com/297-3/ - https://usn.ubuntu.com/296-1/ - https://usn.ubuntu.com/323-1/ - http://secunia.com/advisories/20561 - http://www.us-cert.gov/cas/techalerts/TA06-153A.html - http://secunia.com/advisories/21210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26848 - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://secunia.com/advisories/20382 - http://securitytracker.com/id?1016214 - http://www.securityfocus.com/archive/1/435795/100/0/threaded - http://www.vupen.com/english/advisories/2006/
d?1016214 - http://www.securityfocus.com/archive/1/435795/100/0/threaded - http://www.vupen.com/english/advisories/2006/3749 - http://www.redhat.com/support/errata/RHSA-2006-0610.html - http://secunia.com/advisories/20376 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - http://secunia.com/advisories/21178 - http://securitytracker.com/id?1016202 - http://secunia.com/advisories/21607 - http://www.securityfocus.com/bid/18228 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9849 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/adv
ef%3A9849 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/advisories/2008/0083 - http://www.kb.cert.org/vuls/id/575969 - http://secunia.com/advisories/24108 - http://secunia.com/advisories/21188 - http://secunia.com/advisories/21134 - http://secunia.com/advisories/21631 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.vupen.com/english/advisories/2007/0573 - http://www.securityfocus.com/archive/1/446657/100/200/threaded - https://usn.ubuntu.com/296-2/ - http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml - http://www.debian.org/security/2006/dsa-1118 - http://www.securityfocus.com/archive/1/446658/1
glsa/glsa-200606-21.xml - http://www.debian.org/security/2006/dsa-1118 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.debian.org/security/2006/dsa-1120 - http://www.redhat.com/support/errata/RHSA-2006-0611.html - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://www.debian.org/security/2006/dsa-1134 - http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml - http://secunia.com/advisories/21324 - http://secunia.com/advisories/21183 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21269 - http://www.mozilla.org/security/announce/2006/mfsa2006-37.html - http://www.novell.com/linux/security/advisories/2006_35_mozilla.htm
ozilla.org/security/announce/2006/mfsa2006-37.html - http://www.novell.com/linux/security/advisories/2006_35_mozilla.html - https://usn.ubuntu.com/297-1/ - http://www.redhat.com/support/errata/RHSA-2006-0578.html - http://www.vupen.com/english/advisories/2006/2106 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - http://secunia.com/advisories/22065
CVE ID: CVE-2006-2777 State: PUBLISHED Published: 2006-06-02T18:00:00 Last Updated: 2024-08-07T17:58:51.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execute arbitrary code by using the nsISelectionPrivate interface of the Selection object to add a SelectionListener and create notifications that are executed in a privileged context. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21176 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.vupen.com/english/advisories/2006/3748 - https://usn.
.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.vupen.com/english/advisories/2006/3748 - https://usn.ubuntu.com/296-1/ - https://usn.ubuntu.com/323-1/ - http://secunia.com/advisories/20561 - http://www.kb.cert.org/vuls/id/237257 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26853 - http://www.us-cert.gov/cas/techalerts/TA06-153A.html - http://www.vupen.com/english/advisories/2007/0058 - http://www.securityfocus.com/archive/1/435795/100/0/threaded - http://secunia.com/advisories/20376 - http://secunia.com/advisories/21178 - http://securitytracker.com/id?1016202 - http://www.securityfocus.com/bid/18228 - http://secunia.com/advisories/21532 - http://www.vupen.com/eng