Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1311 State: PUBLISHED Published: 2007-02-13T20:00:00 Last Updated: 2024-08-07T17:03:29.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed OLE object in an RTF file, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0582 - http://www.osvdb.org/31886 - http://www.securitytracker.com/id?1017640 - ht
www.vupen.com/english/advisories/2007/0582 - http://www.osvdb.org/31886 - http://www.securitytracker.com/id?1017640 - http://www.kb.cert.org/vuls/id/368132 - http://www.securitytracker.com/id?1017641 - http://www.securityfocus.com/bid/21876 - http://www.us-cert.gov/cas/techalerts/TA07-044A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30592 - http://secunia.com/advisories/24152 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1090
CVE ID: CVE-2006-1312 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-1313 State: PUBLISHED Published: 2006-06-13T19:00:00 Last Updated: 2024-08-07T17:03:29.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1785 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1644 - http://securitytracker
5 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1644 - http://securitytracker.com/id?1016283 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26805 - http://www.vupen.com/english/advisories/2006/2321 - http://www.us-cert.gov/cas/techalerts/TA06-164A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1067 - http://www.kb.cert.org/vuls/id/390044 - http://www.osvdb.org/26434 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-023 - http://www.securityfocus.com/bid/18359 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2003 - http://secun
m/bid/18359 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2003 - http://secunia.com/advisories/20620
CVE ID: CVE-2006-1314 State: PUBLISHED Published: 2006-07-11T21:00:00 Last Updated: 2024-08-07T17:03:29.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/189140 - http://www.vupen.com/english/advisories/2006/2753 - https://exchange.xforce.ibmcl
ttp://www.kb.cert.org/vuls/id/189140 - http://www.vupen.com/english/advisories/2006/2753 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26818 - http://www.osvdb.org/27154 - http://secunia.com/advisories/21007 - http://securityreason.com/securityalert/1212 - http://www.tippingpoint.com/security/advisories/TSRT-06-02.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A600 - http://www.securityfocus.com/bid/18863 - http://www.securityfocus.com/archive/1/439773/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-035 - http://www.us-cert.gov/cas/techalerts/TA06-192A.html
CVE ID: CVE-2006-1315 State: PUBLISHED Published: 2006-07-11T21:00:00 Last Updated: 2024-08-07T17:03:29.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to obtain sensitive information via crafted requests that leak information in SMB buffers, which are not properly initialized, aka "SMB Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/333636 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3 - http://www.
/vuls/id/333636 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3 - http://www.vupen.com/english/advisories/2006/2753 - http://www.securityfocus.com/bid/18891 - http://securitytracker.com/id?1016467 - http://www.securityfocus.com/archive/1/439881/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26820 - http://secunia.com/advisories/21007 - http://www.osvdb.org/27155 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-035
CVE ID: CVE-2006-1316 State: PUBLISHED Published: 2006-07-11T21:00:00 Last Updated: 2024-08-07T17:03:28.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with malformed string that triggers memory corruption related to record lengths, aka "Microsoft Office Parsing Vulnerability," a different vulnerability than CVE-2006-2389. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21012 - http://www.vupen.com/english/advisories/2006/2756 - https://docs
er: References: - http://secunia.com/advisories/21012 - http://www.vupen.com/english/advisories/2006/2756 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038 - http://www.osvdb.org/27148 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27607 - http://www.securityfocus.com/bid/18912 - http://securitytracker.com/id?1016469 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A918 - http://www.kb.cert.org/vuls/id/580036 - http://www.us-cert.gov/cas/techalerts/TA06-192A.html
CVE ID: CVE-2006-1317 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-1318 State: PUBLISHED Published: 2014-09-19T10:00:00 Last Updated: 2024-08-07T17:03:28.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, Office 2004 for Mac, and Office X for Mac do not properly parse record lengths, which allows remote attackers to execute arbitrary code via a malformed control in an Office document, aka "Microsoft Office Control Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038
CVE ID: CVE-2006-1319 State: PUBLISHED Published: 2006-03-20T11:00:00 Last Updated: 2024-08-07T17:03:28.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: chpst in runit 1.3.3-1 for Debian GNU/Linux, when compiled on little endian i386 machines against dietlibc, does not properly handle when multiple groups are specified in the -u option, which causes chpst to assign permissions for the root group due to inconsistent bit sizes for the gid_t type. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17179 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25419 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356016 - http://secu
change.xforce.ibmcloud.com/vulnerabilities/25419 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356016 - http://secunia.com/advisories/19323
CVE ID: CVE-2006-1320 State: PUBLISHED Published: 2006-03-20T11:00:00 Last Updated: 2024-08-07T17:03:28.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: util.c in rssh 2.3.0 in Debian GNU/Linux does not use braces to make a block, which causes a check for CVS to always succeed and allows rsync and rdist to bypass intended access restrictions in rssh.conf. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1109 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=346322 - http://www.securityfocus.com/bid/18999 - http://secunia.com/advisories/21087 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25424
CVE ID: CVE-2006-1321 State: PUBLISHED Published: 2006-03-20T11:00:00 Last Updated: 2024-08-07T17:03:28.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webcheck before 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the (1) url, (2) title, or (3) author name in a crawled page, which is not properly sanitized in the tooltips of a report. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19309 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25428 - http://ch.tudelft.nl/~arthur/webcheck/news.html#20060130 - http://www.securityfocus.com/bid/17212
CVE ID: CVE-2006-1322 State: PUBLISHED Published: 2006-03-20T22:00:00 Last Updated: 2024-08-07T17:03:28.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell Netware NWFTPD 5.06.05 allows remote attackers to cause a denial of service (ABEND) via an MDTM command that uses a long path for the target file, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0975 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973435.htm - http://www.osvdb.org/23949 - http://securitytracker.com/id?1015781 - http://www.securityfocus.com/bid/17137 - https://exchange.xforce.ibmcloud.com/vulnerabi
securitytracker.com/id?1015781 - http://www.securityfocus.com/bid/17137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25289 - http://secunia.com/advisories/19265
CVE ID: CVE-2006-1323 State: PUBLISHED Published: 2006-03-20T22:00:00 Last Updated: 2024-08-07T17:03:29.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WinHKI 1.6 and earlier allows user-assisted attackers to overwrite arbitrary files via a (1) RAR, (2) TAR, (3) ZIP, or (4) TAR.GZ archive with a file whose file name contains ".." sequences. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1010 - http://secunia.com/advisories/19296 - http://hamid.ir/security/winhki.txt - http://www.securityfocus.com/archive/1/428433/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabili
ki.txt - http://www.securityfocus.com/archive/1/428433/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25335 - http://www.securityfocus.com/bid/17153
CVE ID: CVE-2006-1324 State: PUBLISHED Published: 2006-03-21T01:00:00 Last Updated: 2024-08-07T17:03:29.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in acp/lib/class_db_mysql.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1003 - http://secunia.com/advisories/19293 - http://www.securityfocus.com/bid/17147 - http://www.securityfocus.com/archive/1/428080 - http://securityreason.com/securityalert/529 - http://securi
/bid/17147 - http://www.securityfocus.com/archive/1/428080 - http://securityreason.com/securityalert/529 - http://securityreason.com/securityalert/598 - http://securitytracker.com/id?1015789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25313
CVE ID: CVE-2006-1325 State: PUBLISHED Published: 2006-03-21T01:00:00 Last Updated: 2024-08-07T17:03:28.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Streber 0.055 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25317 - http://www.vupen.com/english/advisories/2006/1005 - http://secunia.com/advisories/19263 - http://www.streber-pm.org/phpBB2/viewtopic.php?p=491#491 - http://www.securityfocus.com/bid/17157
CVE ID: CVE-2006-1326 State: PUBLISHED Published: 2006-03-21T01:00:00 Last Updated: 2024-08-07T17:03:28.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) result_type, (2) search_in, (3) nav, (4) forums, and (5) s parameters in the Search action to index.php; (6) st parameter to index.php with showtopics set to 1; (7) m, (8) y, and (9) d parameters in a calendar action; (10) t parameter in a Print action; (11) MID parameter in a Mail action; (12) HID parameter in a Help action; (13) active parameter in a search action; (14) s
1) MID parameter in a Mail action; (12) HID parameter in a Help action; (13) active parameter in a search action; (14) sort_order, (15) max_results, or (16) sort_key parameter in a Members action. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25010 - http://www.osvdb.org/25013 - http://www.osvdb.org/25011 - http://www.osvdb.org/25014 - http://www.securityfocus.com/archive/1/428015/100/0/threaded - http://www.osvdb.org/25012 - http://www.securityfocus.com/bid/17144 - http://www.osvdb.org/25009 - http://www.osvdb.org/25015
CVE ID: CVE-2006-1327 State: PUBLISHED Published: 2006-03-21T01:00:00 Last Updated: 2024-08-07T17:03:29.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23999 - https://www.exploit-db.com/exploits/1594 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25320 - http://www.securityfocus.com/bid/17160 - http://secunia.com/advisories/19283 - http://www.vupen.com/english/advisories/2006/1002
CVE ID: CVE-2006-1328 State: PUBLISHED Published: 2006-03-21T01:00:00 Last Updated: 2024-08-07T17:03:28.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in count.php in Skull-Splitter PHP Downloadcounter for Wallpapers 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) count_fieldname, (2) url_fieldname, or (3) url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19314 - http://securityreason.com/securityalert/649 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25316 - http://www.securityfocus.com/bid/17156 - http://www.securityfocus.com/archive/1/429255/100/0/thr
vulnerabilities/25316 - http://www.securityfocus.com/bid/17156 - http://www.securityfocus.com/archive/1/429255/100/0/threaded - http://evuln.com/vulns/105/summary.html - http://www.osvdb.org/23972 - http://www.vupen.com/english/advisories/2006/1004
CVE ID: CVE-2006-1329 State: PUBLISHED Published: 2006-03-21T01:00:00 Last Updated: 2024-08-07T17:03:28.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service ("c2s segfault") by sending a "response stanza before an auth stanza". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25334 - http://www.vupen.com/english/advisories/2006/1009 - http://www.securityfocus.com/bid/17155 - http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077 - http://secunia.c
sts.apple.com/archives/security-announce/2010//Mar/msg00001.html - http://support.apple.com/kb/HT4077 - http://secunia.com/advisories/19281 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://article.gmane.org/gmane.network.jabber.admin/27372
CVE ID: CVE-2006-1330 State: PUBLISHED Published: 2006-03-21T01:00:00 Last Updated: 2024-08-07T17:03:29.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL commands via the sid parameter to (1) friend.php or (2) article.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/428156 - http://www.securityfocus.com/archive/1/430870/100/0/threaded - http://www.securityfocus.com/bid/17150 - http://www.vupen.com/english/advisories/2006/1039 - http://secunia.com/advisories/19315 - https://exchange.xforce.ibmcloud.com/v
ww.vupen.com/english/advisories/2006/1039 - http://secunia.com/advisories/19315 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25328
CVE ID: CVE-2006-1331 State: PUBLISHED Published: 2006-03-21T01:00:00 Last Updated: 2024-08-07T17:03:29.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) method or (2) list parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/428157 - http://zone14.free.fr/advisories/1 - http://www.securityfocus.com/bid/17151 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25099 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0191.html -
ge.xforce.ibmcloud.com/vulnerabilities/25099 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0191.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25331
CVE ID: CVE-2006-1332 State: PUBLISHED Published: 2006-03-21T01:00:00 Last Updated: 2024-08-07T17:03:29.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to index.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/428157 - http://securityreason.com/securityalert/471 - http://securityreason.com/securityalert/605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25331
CVE ID: CVE-2006-1333 State: PUBLISHED Published: 2006-03-21T01:00:00 Last Updated: 2024-08-07T17:03:29.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to template_permalink.asp or (2) fldGalleryID parameter to template_gallery_detail.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23966 - http://www.securityfocus.com/archive/1/428082 - http://www.vupen.com/english/advisories/2006/1000 - http://www.nukedx.com/?viewdoc=20 - https://exchange.xforce.ibmcloud.com/vulnerabilities/253
lish/advisories/2006/1000 - http://www.nukedx.com/?viewdoc=20 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25327 - http://secunia.com/advisories/19292 - http://securityreason.com/securityalert/600 - http://blog.betaparticle.com/UserFiles/File/6fix.txt - http://www.securityfocus.com/bid/17148 - http://securitytracker.com/id?1015788 - http://www.osvdb.org/23965
CVE ID: CVE-2006-1334 State: PUBLISHED Published: 2006-03-21T01:00:00 Last Updated: 2024-08-07T17:03:29.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) entry and (2) email parameters to (a) print.php and (b) mail.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23946 - http://securityreason.com/securityalert/638 - http://www.vupen.com/english/advisories/2006/0994 - http://www.securityfocus.com/bid/17247 - http://www.securityfocus.com/archive/1/428903/100/0/threaded - http://www.securityfocus.com/bid/17159 - h
om/bid/17247 - http://www.securityfocus.com/archive/1/428903/100/0/threaded - http://www.securityfocus.com/bid/17159 - http://securitytracker.com/id?1015818 - http://evuln.com/vulns/101/summary.html - http://secunia.com/advisories/19273 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25295 - http://www.osvdb.org/23945
CVE ID: CVE-2006-1335 State: PUBLISHED Published: 2006-03-21T01:00:00 Last Updated: 2024-08-07T17:12:20.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: gnome screensaver before 2.14, when running on an X server with AllowDeactivateGrabs and AllowClosedownGrabs enabled, allows attackers with physical access to cause the screensaver to crash and access the session via the Ctl+Alt+Keypad-Multiply keyboard sequence, which removes the grab from gnome. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25340 - http://secunia.com/advisories/19280 - http://bugzilla.gnome.org/show_bug.cgi?id=326663 - http://www.osvdb.o
ties/25340 - http://secunia.com/advisories/19280 - http://bugzilla.gnome.org/show_bug.cgi?id=326663 - http://www.osvdb.org/24015
CVE ID: CVE-2006-1336 State: PUBLISHED Published: 2006-03-21T02:00:00 Last Updated: 2024-08-07T17:12:20.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) year, (2) month, (3) next, and (4) prev parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1012 - http://www.securityfocus.com/bid/17146 - http://www.securityfocus.com/archive/1/428131/100/0/threaded - http://secunia.com/advisories/19321 - http://www.osvdb.org/23969 - http://s
yfocus.com/archive/1/428131/100/0/threaded - http://secunia.com/advisories/19321 - http://www.osvdb.org/23969 - http://securityreason.com/securityalert/601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25350
CVE ID: CVE-2006-1337 State: PUBLISHED Published: 2006-03-21T02:00:00 Last Updated: 2024-08-07T17:12:20.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the POP 3 (POP3) service in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 allows remote attackers to execute arbitrary code via unknown vectors before authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.mailenable.com/professionalhistory.asp - http://www.mailenable.com/enterprisehistory.asp - http://secunia.com/advisories/19288 - http://www.securityfocus.com/bid/17162 - http://archives.neohapsis.com/archiv
sp - http://secunia.com/advisories/19288 - http://www.securityfocus.com/bid/17162 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1359.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25314 - http://securitytracker.com/id?1015797 - http://www.vupen.com/english/advisories/2006/1006 - http://www.osvdb.org/24012 - http://www.mailenable.com/standardhistory.asp