Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2384 State: PUBLISHED Published: 2006-06-13T19:00:00 Last Updated: 2024-08-07T17:51:04.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious site, aka the "Address Bar Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20595 - http://www.vupen.com/english/advisories/2006/2319 - http://securitytracker.com/id
http://secunia.com/advisories/20595 - http://www.vupen.com/english/advisories/2006/2319 - http://securitytracker.com/id?1016291 - http://www.securityfocus.com/bid/18321 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1567 - http://www.osvdb.org/26445 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1788 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26777 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1646 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1775 - https://docs.microsoft.com/en-us/security-updates/securitybull
ry/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1775 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1478 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1686
CVE ID: CVE-2006-2385 State: PUBLISHED Published: 2006-06-13T19:00:00 Last Updated: 2024-08-07T17:51:03.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption when it is saved as a multipart HTML (.mht) file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20595 - http://www.vupen.com/english/advisories/2006/2319 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1609 - https://oval.cisecurity.or
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1609 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1911 - http://securitytracker.com/id?1016291 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1423 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1916 - http://www.osvdb.org/26446 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1665 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1167 - http://www.securityfocus.com/bid/18320 - https://docs.microsoft.com
arch/definition/oval%3Aorg.mitre.oval%3Adef%3A1167 - http://www.securityfocus.com/bid/18320 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26782
CVE ID: CVE-2006-2386 State: PUBLISHED Published: 2006-12-13T01:00:00 Last Updated: 2024-08-07T17:51:03.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book (WAB) file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23311 - http://www.securityfocus.com/bid/21501 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1055 - http://www.us-cert.gov/cas/techalerts/TA06-346A.html - https://docs.microsoft.com/en-us/security-updates/sec
ef%3A1055 - http://www.us-cert.gov/cas/techalerts/TA06-346A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-076 - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://securitytracker.com/id?1017369 - http://www.vupen.com/english/advisories/2006/4969 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29227
CVE ID: CVE-2006-2387 State: PUBLISHED Published: 2006-10-10T22:00:00 Last Updated: 2024-08-07T17:51:04.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 through 2006 allows user-assisted attackers to execute arbitrary code via a crafted DATETIME record in an XLS file, a different vulnerability than CVE-2006-3867 and CVE-2006-3875. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-06-033.html - http://www.securityfocus.com/archive/1/449179/100/0/threaded - https://docs.microsoft
e.com/advisories/ZDI-06-033.html - http://www.securityfocus.com/archive/1/449179/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-059 - http://www.securityfocus.com/bid/20344 - http://securitytracker.com/id?1017031 - http://www.kb.cert.org/vuls/id/706668 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.vupen.com/english/advisories/2006/3978 - http://www.securityfocus.com/archive/1/448147/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A570
CVE ID: CVE-2006-2388 State: PUBLISHED Published: 2006-07-13T21:00:00 Last Updated: 2024-08-07T17:51:03.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via malformed cell comments, which lead to modification of "critical data offsets" during the rebuilding process. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-037 - http://securitytracker.com/id?1016472 - http://www.securityfocus.com/bid/18938 - http://www.securityfocus.com/archive/1/439786/100/0/threaded - http://www.vupen.com/englis
securityfocus.com/bid/18938 - http://www.securityfocus.com/archive/1/439786/100/0/threaded - http://www.vupen.com/english/advisories/2006/2755 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A234 - http://www.zerodayinitiative.com/advisories/ZDI-06-022.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27604
CVE ID: CVE-2006-2389 State: PUBLISHED Published: 2006-07-11T21:00:00 Last Updated: 2024-08-07T17:51:03.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths, aka "Microsoft Office Property Vulnerability," a different vulnerability than CVE-2006-1316. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21012 - http://www.vupen.com/english/advisories/2006/2756 - https:/
ntainer: References: - http://secunia.com/advisories/21012 - http://www.vupen.com/english/advisories/2006/2756 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038 - http://www.securityfocus.com/bid/18911 - http://www.kb.cert.org/vuls/id/409316 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27609 - http://www.osvdb.org/27149 - http://securitytracker.com/id?1016469 - http://www.us-cert.gov/cas/techalerts/TA06-192A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A279
CVE ID: CVE-2006-2390 State: PUBLISHED Published: 2006-05-16T01:00:00 Last Updated: 2024-08-07T17:51:04.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in OZJournals 1.2 allows remote attackers to inject arbitrary web script or HTML via the vname parameter in the comments functionality. Additional Analyst Notes: - CVE Program Container: References: - http://kiki91.altervista.org/exploit/ozjournals.txt - http://www.vupen.com/english/advisories/2006/1781 - http://www.securityfocus.com/bid/17954 - http://secunia.com/advisories/20091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26403
CVE ID: CVE-2006-2391 State: PUBLISHED Published: 2006-05-16T01:00:00 Last Updated: 2024-08-07T17:51:04.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in EMC Retrospect Client 5.1 through 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted packet to port 497. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/434726/100/0/threaded - http://www.acrossecurity.com/aspr/ASPR-2006-05-17-1-PUB.txt - http://secunia.com/advisories/20080 - http://www.kb.cert.org/vuls/id/186944 - http://www.securityfocus.com/bid/17948 - http://kb.dantz.com/display/2n/arti
0 - http://www.kb.cert.org/vuls/id/186944 - http://www.securityfocus.com/bid/17948 - http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9511 - http://www.vupen.com/english/advisories/2006/1766 - http://securitytracker.com/id?1016136 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26380 - http://securitytracker.com/id?1016063 - http://www.securityfocus.com/bid/18064
CVE ID: CVE-2006-2392 State: PUBLISHED Published: 2006-05-16T01:00:00 Last Updated: 2024-08-07T17:51:04.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in public_includes/pub_popup/popup_finduser.php in PHP Blue Dragon Platinum 2.8.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20115 - https://www.exploit-db.com/exploits/1779 - http://www.securityfocus.com/bid/17977 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26455 - http://www.vupen.com/english/advisories/2006/1789 - http://www.
s://exchange.xforce.ibmcloud.com/vulnerabilities/26455 - http://www.vupen.com/english/advisories/2006/1789 - http://www.osvdb.org/25533
CVE ID: CVE-2006-2393 State: PUBLISHED Published: 2006-05-16T01:00:00 Last Updated: 2024-08-07T17:51:04.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The client_cmd function in Empire 4.3.2 and earlier allows remote attackers to cause a denial of service (application crash) by causing long text strings to be appended to the player->client buffer, which causes an invalid memory access. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/empiredos-adv.txt - http://www.securityfocus.com/archive/1/433940/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26525 - http://secunia.com/advisories/20094 - http://empserv
aded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26525 - http://secunia.com/advisories/20094 - http://empserver.cvs.sourceforge.net/empserver/empserver/src/lib/player/ - http://securityreason.com/securityalert/896 - http://www.vupen.com/english/advisories/2006/1798
CVE ID: CVE-2006-2394 State: PUBLISHED Published: 2006-05-16T01:00:00 Last Updated: 2024-08-07T17:51:04.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in chat.php in PHP Live Helper allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26497 - http://www.securityfocus.com/archive/1/433888/100/0/threaded - http://www.securityfocus.com/bid/17960
CVE ID: CVE-2006-2395 State: PUBLISHED Published: 2006-05-16T01:00:00 Last Updated: 2024-08-07T17:51:04.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in resources/includes/popp.config.loader.inc.php in PopSoft Digital PopPhoto Studio 3.5.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter (cfg['popphoto_base_path'] variable). NOTE: Pixaria has notified CVE that "PopPhoto is NOT a product of Pixaria. It was a product of PopSoft Digital and is only hosted by Pixaria as a courtesy... The vulnerability listed was patched by the previous vendor and all previous users have received thi
ia as a courtesy... The vulnerability listed was patched by the previous vendor and all previous users have received this update." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17970 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26449 - http://www.attrition.org/pipermail/vim/2006-June/000869.html - http://securitytracker.com/id?1016092 - http://www.pixaria.com/news/article/35/ - http://www.vupen.com/english/advisories/2006/1792 - http://secunia.com/advisories/20087 - http://www.osvdb.org/25524 - http://pridels0.blogspot.com/2006/05/popphoto-remote-file-inclusion-vuln.html
CVE ID: CVE-2006-2396 State: PUBLISHED Published: 2006-05-16T01:00:00 Last Updated: 2024-08-07T17:51:04.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpODP 1.5h allows remote attackers to inject arbitrary web script via the browse parameter. Additional Analyst Notes: - CVE Program Container: References: - http://kiki91.altervista.org/exploit/open.txt - http://secunia.com/advisories/20111 - http://www.vupen.com/english/advisories/2006/1801 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26446 - http://www.osvdb.org/25496 - http://www.securityfocus.com/bid/17976
CVE ID: CVE-2006-2397 State: PUBLISHED Published: 2006-05-16T01:00:00 Last Updated: 2024-08-07T17:51:04.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in GPhotos 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) rep parameter to (a) index.php or (b) diapo.php or (2) image parameter to (c) affich.php. NOTE: item 1a might be resultant from directory traversal. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17967 - http://www.vupen.com/english/advisories/2006/1806 - http://www.osvdb.org/25499 - https://exchange.xforce.ibmcloud.com/vulner
://www.vupen.com/english/advisories/2006/1806 - http://www.osvdb.org/25499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26426 - http://www.osvdb.org/25497 - http://www.osvdb.org/25498 - http://secunia.com/advisories/20095 - http://www.securityfocus.com/archive/1/433936/100/0/threaded - http://securityreason.com/securityalert/906
CVE ID: CVE-2006-2398 State: PUBLISHED Published: 2006-05-16T01:00:00 Last Updated: 2024-08-07T17:51:03.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in GPhotos 1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the rep parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17967 - http://www.vupen.com/english/advisories/2006/1806 - http://secunia.com/advisories/20095 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26428 - http://www.securityfocus.com/archive/1/452025/100/200/threaded - http://www.securityfocus.com/archive/1/452099/1
26428 - http://www.securityfocus.com/archive/1/452025/100/200/threaded - http://www.securityfocus.com/archive/1/452099/100/200/threaded - http://www.osvdb.org/25500 - http://www.securityfocus.com/archive/1/433936/100/0/threaded - http://securityreason.com/securityalert/906
CVE ID: CVE-2006-2399 State: PUBLISHED Published: 2006-05-16T01:00:00 Last Updated: 2024-08-07T17:51:04.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ServerNetworking::incoming_client_data function in servnet.cpp in Outgun 1.0.3 bot 2 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a data_file_request command with a long (1) type or (2) name string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26509 - http://www.securityfocus.com/archive/1/433932/100/0/threaded - http://aluigi.altervista.org/
com/vulnerabilities/26509 - http://www.securityfocus.com/archive/1/433932/100/0/threaded - http://aluigi.altervista.org/adv/outgunx-adv.txt - http://securityreason.com/securityalert/898 - http://secunia.com/advisories/20098 - http://www.securityfocus.com/bid/17985 - http://www.vupen.com/english/advisories/2006/1796
CVE ID: CVE-2006-2400 State: PUBLISHED Published: 2006-05-16T01:00:00 Last Updated: 2024-08-07T17:51:04.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leetnet functions (leetnet/rudp.cpp) in Outgun 1.0.3 bot 2 and earlier allow remote attackers to cause a denial of service (game interruption) via large packets, which cause an exception to be thrown. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/433932/100/0/threaded - http://aluigi.altervista.org/adv/outgunx-adv.txt - http://securityreason.com/securityalert/898 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26511 - http://secunia.com/advisories/20098 - htt
curityalert/898 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26511 - http://secunia.com/advisories/20098 - http://www.osvdb.org/25488 - http://www.securityfocus.com/bid/17985 - http://www.vupen.com/english/advisories/2006/1796
CVE ID: CVE-2006-2401 State: PUBLISHED Published: 2006-05-16T01:00:00 Last Updated: 2024-08-07T17:51:03.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: The leetnet functions (leetnet/rudp.cpp) in Outgun 1.0.3 bot 2 and earlier allow remote attackers to cause a denial of service (application crash) via packets with incorrect message sizes, which triggers a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26512 - http://www.securityfocus.com/archive/1/433932/100/0/threaded - http://aluigi.altervista.org/adv/outgunx-adv.txt - http://securityreason.com/securityalert/898 - http://secunia.com/adv
http://aluigi.altervista.org/adv/outgunx-adv.txt - http://securityreason.com/securityalert/898 - http://secunia.com/advisories/20098 - http://www.securityfocus.com/bid/17985 - http://www.vupen.com/english/advisories/2006/1796
CVE ID: CVE-2006-2402 State: PUBLISHED Published: 2006-05-16T01:00:00 Last Updated: 2024-08-07T17:51:04.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the changeRegistration function in servernet.cpp for Outgun 1.0.3 bot 2 and earlier allows remote attackers to change the registration information of other players via a long string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/433932/100/0/threaded - http://aluigi.altervista.org/adv/outgunx-adv.txt - http://securityreason.com/securityalert/898 - http://secunia.com/advisories/20098 - http://www.securityfocus.com/bid/17985 - https://exchange.xforce.ib
ityalert/898 - http://secunia.com/advisories/20098 - http://www.securityfocus.com/bid/17985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26513 - http://www.vupen.com/english/advisories/2006/1796
CVE ID: CVE-2006-2403 State: PUBLISHED Published: 2006-05-16T01:00:00 Last Updated: 2024-08-07T17:51:04.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in FileZilla before 2.2.23 allows remote attackers to execute arbitrary commands via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29970 - http://www.vupen.com/english/advisories/2006/1795 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26450 - http://secunia.com/advisories/20086 - http://www.securityfocus.com/bid/17972 - http://sourceforge.net/project/shownotes.php?release_id=416790
CVE ID: CVE-2006-2404 State: PUBLISHED Published: 2006-05-16T01:00:00 Last Updated: 2024-08-07T17:51:04.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in popup.php in RadScripts RadLance Gold 7.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the read parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securiteam.com/exploits/5VP0C1FIKY.html - http://www.securityfocus.com/archive/1/434327/100/0/threaded - http://secunia.com/advisories/20133 - http://downloads.securityfocus.com/vulnerabilities/exploits/RadLance-0515-lfi.pl - http://www.osvdb.org/25522 - http://www.securityfocus.com/bid
yfocus.com/vulnerabilities/exploits/RadLance-0515-lfi.pl - http://www.osvdb.org/25522 - http://www.securityfocus.com/bid/17975 - http://www.vupen.com/english/advisories/2006/1816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26492
CVE ID: CVE-2006-2405 State: PUBLISHED Published: 2006-05-16T10:00:00 Last Updated: 2024-08-07T17:51:04.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in unb_lib/abbc.conf.php in Unclassified NewsBoard (UNB) 1.6.1 patch 1 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via .. (dot dot) sequences and a trailing null byte (%00) in the ABBC[Config][smileset] parameter to unb_lib/abbc.css.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20090 - http://retrogod.altervista.org/unb_161p1_incl_xpl.html - http://securityreason.com/securityalert/899 -
visories/20090 - http://retrogod.altervista.org/unb_161p1_incl_xpl.html - http://securityreason.com/securityalert/899 - http://www.securityfocus.com/archive/1/433686/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26507 - http://www.osvdb.org/25494 - http://newsboard.unclassified.de/forum/post/6499 - http://www.securityfocus.com/bid/17947 - http://www.vupen.com/english/advisories/2006/1782
CVE ID: CVE-2006-2406 State: PUBLISHED Published: 2006-05-16T10:00:00 Last Updated: 2024-08-07T17:51:04.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in bb_lib/abbc.css.php in Unclassified NewsBoard (UNB) 1.5.3-d and possibly earlier versions, when register_globals is enabled, allows remote attackers to include arbitrary files via .. (dot dot) sequences and a trailing null byte (%00) in the design_path parameter. NOTE: this is closely related, but a different vulnerability than the ABBC[Config][smileset] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2006-May/000769.html - http
nal Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2006-May/000769.html - http://www.osvdb.org/25494 - http://newsboard.unclassified.de/forum/post/6499
CVE ID: CVE-2006-2407 State: PUBLISHED Published: 2006-05-16T10:00:00 Last Updated: 2024-08-07T17:51:04.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in (1) WeOnlyDo wodSSHServer ActiveX Component 1.2.7 and 1.3.3 DEMO, as used in other products including (2) FreeSSHd 1.0.9 and (3) freeFTPd 1.0.10, allows remote attackers to execute arbitrary code via a long key exchange algorithm string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19846 - http://www.osvdb.org/25569 - http://www.securityfocus.com/archive/1/434007/100/0/threaded - http://www.securityfocus.com/archive/1/434402/100/0/threaded - http: