Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
r 3.2.9 and earlier, allows remote authenticated users to execute arbitrary commands via unspecified vectors, involving crafted filenames and the stat command. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015619 - http://support.wrq.com/techdocs/1882.html - http://secunia.com/advisories/24516 - http://secunia.com/advisories/29552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24651 - http://www.kb.cert.org/vuls/id/419241 - http://marc.info/?l=bugtraq&m=120654385125315&w=2 - http://secunia.com/advisories/18828 - http://security.gentoo.org/glsa/glsa-200703-13.xml - http://www.vupen.com/english/advisories/2006/0555 - http://www.vupen.co
://security.gentoo.org/glsa/glsa-200703-13.xml - http://www.vupen.com/english/advisories/2006/0555 - http://www.vupen.com/english/advisories/2006/0554 - http://www.securityfocus.com/bid/16625 - http://www.vupen.com/english/advisories/2008/1008/references - http://www.securityfocus.com/bid/16640 - http://marc.info/?l=bugtraq&m=120654385125315&w=2 - http://secunia.com/advisories/18843
CVE ID: CVE-2006-0706 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in eintrag.php in Gästebuch (Gastebuch) before 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the URL, which is used in the homepage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24670 - http://www.securityfocus.com/bid/16615 - http://marc.info/?l=bugtraq&m=113986789801121&w=2 - http://secunia.com/advisories/18849 - http://www.php4scr
bid/16615 - http://marc.info/?l=bugtraq&m=113986789801121&w=2 - http://secunia.com/advisories/18849 - http://www.php4scripte.de/index.php
CVE ID: CVE-2006-0707 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: PyBlosxom before 1.3.2, when running on certain webservers, allows remote attackers to read arbitrary files via an HTTP request with multiple leading / (slash) characters, which is accessed using the PATH_INFO variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24730 - http://www.vupen.com/english/advisories/2006/0571 - http://sourceforge.net/project/shownotes.php?release_id=391800 - http://secunia.com/advisorie
ish/advisories/2006/0571 - http://sourceforge.net/project/shownotes.php?release_id=391800 - http://secunia.com/advisories/18858
CVE ID: CVE-2006-0708 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in NullSoft Winamp 5.13 and earlier allow remote attackers to execute arbitrary code via (1) an m3u file containing a long URL ending in .wma, (2) a pls file containing a File1 field with a long URL ending in .wma, or (3) an m3u file with a long filename, variants of CVE-2005-3188 and CVE-2006-0476. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16623 - http://www.securityfocus.com/archive/1/424903/100/0/threaded - https://exchange.xforce.ibmcloud.com
ocus.com/bid/16623 - http://www.securityfocus.com/archive/1/424903/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24740 - http://www.vupen.com/english/advisories/2006/0613 - http://forums.winamp.com/showthread.php?s=&threadid=238648 - http://securityreason.com/securityalert/444 - http://securityreason.com/securityalert/492 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24739 - http://securitytracker.com/id?1015621
CVE ID: CVE-2006-0709 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Metamail 2.7-50 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via e-mail messages with a long boundary attribute, a different vulnerability than CVE-2004-0105. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015654 - http://secunia.com/advisories/18796 - http://www.novell.com/linux/security/advisories/2006_05_sr.html - http://secunia.com/advisories/19226 - http://bugs.debian.org/cgi-bin/bugreport.cgi
security/advisories/2006_05_sr.html - http://secunia.com/advisories/19226 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=352482 - http://www.gentoo.org/security/en/glsa/glsa-200603-16.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/24702 - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:047 - http://secunia.com/advisories/18987 - http://secunia.com/advisories/19130 - http://www.debian.org/security/2006/dsa-995 - http://www.redhat.com/support/errata/RHSA-2006-0217.html - http://secunia.com/advisories/19000 - http://www.securityfocus.com/bid/16611 - http://secunia.com/advisories/19304 - http://www.vupen.com/english/advisories/2006/0565
CVE ID: CVE-2006-0710 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:48:55.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code via a crafted LDAP request, as demonstrated by ProtoVer Sample LDAP. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18818 - http://www.vupen.com/english/advisories/2006/0567 - http://lists.immunitysec.com/pipermail/dailydave/2006-February/002925.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24700 - http://www.securityfocus.com/bid/16635
CVE ID: CVE-2006-0711 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:48:55.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) addfolder and (2) deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not validate the Session ID, which allows remote attackers to add and delete arbitrary files, when configured with homedirfolders and homedirspools disabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0564 - http://secunia.com/secunia_research/2006-3/advisory/ - http://sourceforge.net/project/shownotes.php?release_id=392562&group_id=2874 - http://www.securityfocus.com/bid/16
ry/ - http://sourceforge.net/project/shownotes.php?release_id=392562&group_id=2874 - http://www.securityfocus.com/bid/16651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24737 - http://secunia.com/advisories/18785
CVE ID: CVE-2006-0712 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:48:55.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: mail_html template in Squishdot 1.5.0 and earlier does not properly validate the (1) email and (2) title variables, which allows remote attackers to bypass spam filters by injecting SMTP headers, probably due to a CRLF injection vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18868 - http://www.securityfocus.com/bid/16667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24659 - http://www.squishdot.org/1139510883 - http://www.vupen.com/english/advisories/2006/
ibmcloud.com/vulnerabilities/24659 - http://www.squishdot.org/1139510883 - http://www.vupen.com/english/advisories/2006/0551
CVE ID: CVE-2006-0713 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:48:55.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in LinPHA 1.0 allows remote attackers to include arbitrary files via .. (dot dot) sequences in the (1) lang parameter in docs/index.php and the language parameter in (2) install/install.php, (3) install/sec_stage_install.php, (4) install/third_stage_install.php, and (5) install/forth_stage_install.php. NOTE: direct static code injection is resultant from this issue, as demonstrated by inserting PHP code into the username, which is inserted into linpha.log, which is accessible from the director
trated by inserting PHP code into the username, which is inserted into linpha.log, which is accessible from the directory traversal. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/424729/100/0/threaded - http://secunia.com/advisories/18808 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24663 - http://www.securityfocus.com/bid/16592 - http://securityreason.com/securityalert/426 - http://retrogod.altervista.org/linpha_10_local.html - http://www.vupen.com/english/advisories/2006/0535
CVE ID: CVE-2006-0714 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:48:55.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the installation file (sql/install-0.9.7.php) in Flyspray 0.9.7 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the adodbpath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/424902/100/0/threaded - http://www.vupen.com/english/advisories/2006/0569 - http://securityreason.com/securityalert/432 - http://retrogod.altervista.org/egs_10rc4_php5_incl_xpl.html - http://www.securityfocus.com/bid/166
m/securityalert/432 - http://retrogod.altervista.org/egs_10rc4_php5_incl_xpl.html - http://www.securityfocus.com/bid/16618 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24735 - http://secunia.com/advisories/18847
CVE ID: CVE-2006-0715 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:48:55.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML via the comment field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/424958/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0297.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24674 - http://www.securityfocus.com/bid/16647
CVE ID: CVE-2006-0716 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:48:55.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in sNews 1.3 allows remote attackers to execute arbitrary SQL commands via the (1) category and (2) id parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/424958/100/0/threaded - http://securityreason.com/securityalert/431 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0297.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24675 - http://www.securityfocus.com/bid/16647
CVE ID: CVE-2006-0717 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:48:55.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request, as demonstrated by test 2532 in the ProtoVer Sample LDAP test suite. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015653 - http://www.vupen.com/english/advisories/2006/0537 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24619 - http://www-1.ibm.com/support/docview.wss?uid=swg21230820 - http://secunia.com/advisories/18779 - http://lists.immunitysec.co
://www-1.ibm.com/support/docview.wss?uid=swg21230820 - http://secunia.com/advisories/18779 - http://lists.immunitysec.com/pipermail/dailydave/2006-February/002921.html - http://www.securityfocus.com/bid/16593
CVE ID: CVE-2006-0718 State: PUBLISHED Published: 2006-02-15T21:00:00Z Last Updated: 2024-09-16T19:15:41.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Internet Key Exchange version 1 (IKEv1) implementation in Avaya VSU 100, 2000, 7500, 10000, and CSU 5000, when running IPSec, allows remote attackers to cause a denial of service (crash) via certain IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18836 - http:/
pplies to. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18836 - http://www.kb.cert.org/vuls/id/226364 - http://www.securityfocus.com/bid/16613 - http://support.avaya.com/elmodocs2/security/ASA-2006-043.htm
CVE ID: CVE-2006-0719 State: PUBLISHED Published: 2006-02-15T22:00:00 Last Updated: 2024-08-07T16:48:55.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in member_login.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute arbitrary SQL commands via the (1) username parameter, which is used by the E-mail address field, and (2) password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/424955/100/0/threaded - http://www.vupen.com/english/advisories/2006/0600 - http://secunia.com/advisories/18881 - http://securityreason.com/securityalert/424 - http://www.securityfoc
s/2006/0600 - http://secunia.com/advisories/18881 - http://securityreason.com/securityalert/424 - http://www.securityfocus.com/bid/16642 - http://www.deltascripts.com/board/viewtopic.php?id=7234
CVE ID: CVE-2006-0720 State: PUBLISHED Published: 2006-02-23T21:00:00 Last Updated: 2024-08-07T16:48:55.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .m3u file that causes an incorrect strncpy function call when the player pauses or stops the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/425888/100/0/threaded - http://securityreason.com/securityalert/476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24740 - http://forums.winam
/securityreason.com/securityalert/476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24740 - http://forums.winamp.com/showthread.php?threadid=238648 - http://www.nsfocus.com/english/homepage/research/0601.htm - http://www.securityfocus.com/bid/16785 - http://securitytracker.com/id?1015675
CVE ID: CVE-2006-0721 State: PUBLISHED Published: 2006-02-16T11:00:00 Last Updated: 2024-08-07T16:48:55.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pmlite.php in RunCMS 1.2 and 1.3a allows remote attackers to execute arbitrary SQL commands via the to_userid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18831 - http://securitytracker.com/id?1015626 - http://hamid.ir/security/runcms.txt - http://www.vupen.com/english/advisories/2006/0572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24676 - http://www.securityfocus.com/archive/1/425293/100/0/threaded - http://www.runcms.org/p
cloud.com/vulnerabilities/24676 - http://www.securityfocus.com/archive/1/425293/100/0/threaded - http://www.runcms.org/public/modules/forum/viewtopic.php?topic_id=4003&forum=18 - http://www.securityfocus.com/bid/16652
CVE ID: CVE-2006-0722 State: PUBLISHED Published: 2006-02-16T11:00:00 Last Updated: 2024-08-07T16:48:55.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: settings.php in Reamday Enterprises Magic Downloads 1.1.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/73/summary.html - http://securityreason.com/securityalert/468 - http://www.securityfocus.com/archive/1/425601/30/6830/
s/73/summary.html - http://securityreason.com/securityalert/468 - http://www.securityfocus.com/archive/1/425601/30/6830/threaded - http://www.vupen.com/english/advisories/2006/0602 - http://secunia.com/advisories/18877 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24615 - http://www.securityfocus.com/bid/16665
CVE ID: CVE-2006-0723 State: PUBLISHED Published: 2006-02-16T11:00:00 Last Updated: 2024-08-07T16:48:55.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in preview.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the php_script_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24608 - http://evuln.com/vulns/72/summary.html - http://secunia.com/advisories/18878 - http://www.securityfocus.com/bid/16660 - http://www.vupen.com/english/advisories/2006/0603 - http
com/advisories/18878 - http://www.securityfocus.com/bid/16660 - http://www.vupen.com/english/advisories/2006/0603 - http://www.securityfocus.com/bid/16665
CVE ID: CVE-2006-0724 State: PUBLISHED Published: 2006-02-16T11:00:00 Last Updated: 2024-08-07T16:48:55.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: profile.php in Reamday Enterprises Magic News Lite 1.2.3, when register_globals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified (1) action, (2) passwd, (3) admin_password, (4) new_passwd, and (5) confirm_passwd variables, which are not initialized. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/72/summary.html - http://secunia.com/advisories/18878 - http://www.vupen.com/english/advisories/2006/0603 - http://www.
/72/summary.html - http://secunia.com/advisories/18878 - http://www.vupen.com/english/advisories/2006/0603 - http://www.securityfocus.com/bid/16665 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24610
CVE ID: CVE-2006-0725 State: PUBLISHED Published: 2006-02-16T11:00:00 Last Updated: 2024-08-07T16:48:55.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the _PX_config[manager_path] parameter. NOTE: this is a different executable and affected version than CVE-2006-2645. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27699 - http://secunia
.xforce.ibmcloud.com/vulnerabilities/24697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27699 - http://secunia.com/advisories/18883 - http://www.vupen.com/english/advisories/2006/0599 - http://www.osvdb.org/23204 - http://plume-cms.net/news/77-Security-Notice-Please-Update-Your-Prependphp-File - http://www.securityfocus.com/bid/16662
CVE ID: CVE-2006-0726 State: PUBLISHED Published: 2006-02-16T11:00:00 Last Updated: 2024-08-07T16:48:55.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in linking.php in CPG-Nuke Dragonfly CMS 9.0.6.1 allows remote attackers to inject arbitrary web script or HTML via a URI that is generated when creating a list of online users. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23060 - http://dragonflycms.org/Forums/viewtopic/t=14751.html - http://secunia.com/advisories/18919 - http://www.securityfocus.com/bid/16781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24842 - http://dragonflycms.org
//www.securityfocus.com/bid/16781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24842 - http://dragonflycms.org/cvs/html/includes/functions/linking.php?b=9.19.2 - http://www.vupen.com/english/advisories/2006/0688 - http://dragonflycms.org/Forums/viewtopic/t=14877/postdays=0/postorder=asc/start=15.html - http://dragonflycms.org/cvs/html/includes/functions/linking.php?d=9.23-9.22
CVE ID: CVE-2006-0727 State: PUBLISHED Published: 2006-02-16T11:00:00 Last Updated: 2024-08-07T16:48:55.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mstrack.php in MusOX DF MSAnalysis (DFMSA), as used in some environments that use CPG-Nuke Dragonfly CMS, allows remote attackers to trigger path disclosure from a SQL syntax error, and possibly execute arbitrary SQL commands, via certain query data, probably involving the profile name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16783 - http://www.osvdb.org/23060 - http://dragonflycms.org/Forums/viewtopic/t=14751.html - http://www.osvdb.org/2
/bid/16783 - http://www.osvdb.org/23060 - http://dragonflycms.org/Forums/viewtopic/t=14751.html - http://www.osvdb.org/23250 - http://dragonflycms.org/cvs/html/includes/functions/linking.php?b=9.19.2 - http://www.vupen.com/english/advisories/2006/0688 - http://dragonflycms.org/Forums/viewtopic/t=14877/postdays=0/postorder=asc/start=15.html - http://dragonflycms.org/cvs/html/includes/functions/linking.php?d=9.23-9.22
CVE ID: CVE-2006-0728 State: PUBLISHED Published: 2006-02-16T11:00:00 Last Updated: 2024-08-07T16:48:55.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in webSPELL 4.01.00 and earlier allows remote attackers to inject arbitrary SQL commands via the title_op parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18885 - http://www.webspell.org/index.php?site=news_comments&newsID=49&lang=en - http://www.securityfocus.com/bid/16673 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24708 - http://www.vupen.com/english/advisories/2006/0606
CVE ID: CVE-2006-0729 State: PUBLISHED Published: 2006-02-16T11:00:00 Last Updated: 2024-08-07T16:48:55.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in functions.php in Teca Diary PE 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) yy, (2) mm, and (3) dd parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015674 - http://secunia.com/advisories/18876 - http://securityreason.com/securityalert/477 - http://www.evuln.com/vulns/75/summary.html - http://www.securityfocus.com/bid/16686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24643 - http://www.securityfocus.
www.securityfocus.com/bid/16686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24643 - http://www.securityfocus.com/archive/1/425892/30/6800/threaded - http://www.vupen.com/english/advisories/2006/0615
CVE ID: CVE-2006-0730 State: PUBLISHED Published: 2006-02-16T11:00:00 Last Updated: 2024-08-07T16:48:55.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Dovecot before 1.0beta3 allow remote attackers to cause a denial of service (application crash or hang) via unspecified vectors involving (1) "potential hangs" in the APPEND command and "potential crashes" in (2) dovecot-auth and (3) imap/pop3-login. NOTE: vector 2 might be related to a double free vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24709 - http://www.vu