Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1604 State: PUBLISHED Published: 2006-04-04T10:00:00 Last Updated: 2024-08-07T17:19:48.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not "typecasted." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1201 - http://secunia.com/advisories/19498 - http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524 - http://www.securityfocus.com/bid/17357
CVE ID: CVE-2006-1605 State: PUBLISHED Published: 2006-04-04T10:00:00 Last Updated: 2024-08-07T17:19:48.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unknown vectors involving "parsed PHP." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1201 - http://secunia.com/advisories/19498 - http://www.osvdb.org/24358 - http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524 - http://www.securityfocus.com/bid/17357
CVE ID: CVE-2006-1606 State: PUBLISHED Published: 2006-04-04T10:00:00 Last Updated: 2024-08-07T17:19:48.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1201 - http://secunia.com/advisories/19498 - http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524 - http://www.securityfocus.com/bid/17357
CVE ID: CVE-2006-1607 State: PUBLISHED Published: 2006-04-04T10:00:00 Last Updated: 2024-08-07T17:19:48.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php injection" via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1201 - http://secunia.com/advisories/19498 - http://www.osvdb.org/24358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25610 - http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524 - http://www.securityfocus.com/bid/17357
CVE ID: CVE-2006-1608 State: PUBLISHED Published: 2006-04-10T19:00:00 Last Updated: 2024-08-07T17:19:48.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via a source argument containing a compress.zlib:// URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25706 - http://www.securityfocus.com/archive/1/440869/100/0/threaded - http://securityreason.com/achievement_securityalert/37 - http://securityreason.com/securityalert/678 - http://www.vupen.com/english/a
tyreason.com/achievement_securityalert/37 - http://securityreason.com/securityalert/678 - http://www.vupen.com/english/advisories/2006/1290 - http://www.ubuntu.com/usn/usn-320-1 - http://secunia.com/advisories/21125 - http://secunia.com/advisories/19599 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:074 - http://www.osvdb.org/24487 - http://www.securityfocus.com/archive/1/430461/100/0/threaded - http://us.php.net/releases/5_1_3.php - http://securitytracker.com/id?1015882 - http://www.securityfocus.com/bid/17439 - http://www.securityfocus.com/archive/1/441210/100/0/threaded
CVE ID: CVE-2006-1609 State: PUBLISHED Published: 2006-04-04T10:00:00 Last Updated: 2024-08-07T17:19:48.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi XFIT/S, XFIT/S/JCA, XFIT/S/ZGN, and XFIT/S ZENGIN TCP/IP Procedure allows remote attackers to cause a denial of service (server process and transfer control process stop) when the products "receive data unexpectedly". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17329 - http://secunia.com/advisories/19472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25567 - http://www.hitachi-support.com/security_e/vuls_e/HS06-004_e/index-e.html
nge.xforce.ibmcloud.com/vulnerabilities/25567 - http://www.hitachi-support.com/security_e/vuls_e/HS06-004_e/index-e.html - http://www.osvdb.org/24309
CVE ID: CVE-2006-1610 State: PUBLISHED Published: 2006-04-04T10:00:00 Last Updated: 2024-08-07T17:19:48.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/armygame.php in SQuery 4.5 and earlier, as used in products such as Autonomous LAN party (ALP), allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter. NOTE: this only occurs when register_globals is disabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25605 - http://www.vupen.com/english/advisories/2006/1204 - https://www.exploit-db
e.xforce.ibmcloud.com/vulnerabilities/25605 - http://www.vupen.com/english/advisories/2006/1204 - https://www.exploit-db.com/exploits/1629 - http://secunia.com/advisories/19482 - http://www.securityfocus.com/archive/1/429611/100/0/threaded - http://www.osvdb.org/24400
CVE ID: CVE-2006-1611 State: PUBLISHED Published: 2006-04-04T10:00:00 Last Updated: 2024-08-07T17:19:48.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in KGB Archiver before 1.1.5.22 allows remote attackers to overwrite arbitrary files wile decompressing an archive, possibly due to directory traversal sequences in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1207 - http://sourceforge.net/project/shownotes.php?group_id=162546&release_id=406411 - http://www.securityfocus.com/bid/17363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25606 - http://secunia.com/ad
p://www.securityfocus.com/bid/17363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25606 - http://secunia.com/advisories/19511
CVE ID: CVE-2006-1612 State: PUBLISHED Published: 2006-04-04T10:00:00 Last Updated: 2024-08-07T17:19:48.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in visview.php in aWebNews 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) yname, (2) emailadd, (3) subject, and (4) comment parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1196 - http://www.securityfocus.com/archive/1/431007/100/0/threaded - http://secunia.com/advisories/19487 - http://www.osvdb.org/24333 - http://evuln.com/vulns/116/summary.html - https://exchange.xforce.
a.com/advisories/19487 - http://www.osvdb.org/24333 - http://evuln.com/vulns/116/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25589 - http://securityreason.com/securityalert/707
CVE ID: CVE-2006-1613 State: PUBLISHED Published: 2006-04-04T10:00:00 Last Updated: 2024-08-07T17:19:48.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in aWebNews 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user123 variable in (a) login.php or (b) fpass.php; or (2) cid parameter to (c) visview.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1196 - http://www.osvdb.org/24336 - http://www.osvdb.org/24334 - http://www.osvdb.org/24335 - http://www.securityfocus.com/archive/1/431007/100/0/threaded - http://secunia.com/advisories/19487 - https://ex
/24335 - http://www.securityfocus.com/archive/1/431007/100/0/threaded - http://secunia.com/advisories/19487 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25590 - http://evuln.com/vulns/116/summary.html
CVE ID: CVE-2006-1614 State: PUBLISHED Published: 2006-04-06T22:00:00 Last Updated: 2024-08-07T17:19:48.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19567 - http://www.securityfocus.com/bid/17951 - http://www.vupen.com/english/advisories/2006/1258 - http://www.vupen.com/english/advisories/2006/1779 - http://www.us-cert.gov/cas/tec
en.com/english/advisories/2006/1258 - http://www.vupen.com/english/advisories/2006/1779 - http://www.us-cert.gov/cas/techalerts/TA06-132A.html - http://sourceforge.net/project/shownotes.php?release_id=407078&group_id=86638 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25660 - http://www.osvdb.org/24457 - http://securitytracker.com/id?1015887 - http://secunia.com/advisories/19570 - http://up2date.astaro.com/2006/05/low_up2date_6202.html - http://www.gentoo.org/security/en/glsa/glsa-200604-06.xml - http://secunia.com/advisories/19608 - http://secunia.com/advisories/19534 - http://secunia.com/advisories/19564 - http://secunia.com/advisories/19536 - http://lists.apple.com/archives/secur
9534 - http://secunia.com/advisories/19564 - http://secunia.com/advisories/19536 - http://lists.apple.com/archives/security-announce/2006/May/msg00003.html - http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:067 - http://www.securityfocus.com/bid/17388 - http://www.debian.org/security/2006/dsa-1024 - http://secunia.com/advisories/23719 - http://secunia.com/advisories/20077 - http://www.trustix.org/errata/2006/0020 - http://www.overflow.pl/adv/clamavupxinteger.txt - http://www.securityfocus.com/archive/1/430405/100/0/threaded
CVE ID: CVE-2006-1615 State: PUBLISHED Published: 2006-04-06T22:00:00 Last Updated: 2024-08-07T17:19:48.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute arbitrary code. NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidence that the arguments are actually being sanitized properly. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19567 - http://www.securityfocus.com/bid/17951 - http://www.vupen.com/english/advisories/2006/1258 - http://www.vupen.com/englis
http://www.securityfocus.com/bid/17951 - http://www.vupen.com/english/advisories/2006/1258 - http://www.vupen.com/english/advisories/2006/1779 - http://www.us-cert.gov/cas/techalerts/TA06-132A.html - http://sourceforge.net/project/shownotes.php?release_id=407078&group_id=86638 - http://www.osvdb.org/24458 - http://secunia.com/advisories/19570 - http://up2date.astaro.com/2006/05/low_up2date_6202.html - http://www.gentoo.org/security/en/glsa/glsa-200604-06.xml - http://secunia.com/advisories/19608 - http://secunia.com/advisories/19534 - http://secunia.com/advisories/19564 - http://secunia.com/advisories/19536 - http://lists.apple.com/archives/security-announce/2006/May/msg00003.html - http://l
ttp://secunia.com/advisories/19536 - http://lists.apple.com/archives/security-announce/2006/May/msg00003.html - http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:067 - http://www.securityfocus.com/bid/17388 - http://www.debian.org/security/2006/dsa-1024 - http://secunia.com/advisories/23719 - http://secunia.com/advisories/20077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25661 - http://www.trustix.org/errata/2006/0020
CVE ID: CVE-2006-1616 State: PUBLISHED Published: 2006-04-05T10:00:00 Last Updated: 2024-08-07T17:19:49.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to comments.php or (2) poll_id parameter to page.php. Additional Analyst Notes: - CVE Program Container: References: - http://ns79.hosteur.com/~secuti/advancedpoll.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/25676
CVE ID: CVE-2006-1617 State: PUBLISHED Published: 2006-04-05T10:00:00 Last Updated: 2024-08-07T17:19:48.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Advanced Poll 2.02 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to comments.php or (2) poll_id parameter to page.php. NOTE: it is possible that this issue is resultant from CVE-2006-1616. Additional Analyst Notes: - CVE Program Container: References: - http://ns79.hosteur.com/~secuti/advancedpoll.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/25677
CVE ID: CVE-2006-1618 State: PUBLISHED Published: 2006-04-05T10:00:00 Last Updated: 2024-08-07T17:19:48.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the (1) Con_message and (2) conPrintf functions in con_main.c in Doomsday engine 1.8.6 allows remote attackers to execute arbitrary code via format string specifiers in an argument to the JOIN command, and possibly other command arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429857/100/0/threaded - http://securitytracker.com/id?1015860 - http://www.gentoo.org/security/en/glsa/glsa-200604-05.xml - http://aluigi.altervista.org/adv/
tytracker.com/id?1015860 - http://www.gentoo.org/security/en/glsa/glsa-200604-05.xml - http://aluigi.altervista.org/adv/doomsdayfs-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/25622 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044865.html - http://secunia.com/advisories/19519 - http://www.securityfocus.com/bid/17369 - http://secunia.com/advisories/19515 - http://www.vupen.com/english/advisories/2006/1221
CVE ID: CVE-2006-1619 State: PUBLISHED Published: 2006-04-05T10:00:00 Last Updated: 2024-08-07T17:19:48.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server 4.0.1 through 4.0.3 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a large header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25619 - http://www.vupen.com/english/advisories/2006/1214 - http://securitytracker.com/id?1015857 - http://www-1.ibm.com/support/docview.wss?uid=swg21053738
CVE ID: CVE-2006-1620 State: PUBLISHED Published: 2006-04-05T10:00:00 Last Updated: 2024-08-07T17:19:49.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to modify passwords of other users, probably via an "Update User" ActionType with a modified UserName parameter and the PassCheck parameter set to TRUE. It was later reported that the vulnerability is present in 6.1 Hotfix 3.3 and earlier. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28973 - http://www.securityfocus.com/archive/1/485028/100/0/threaded - http://www.securityfocus.com/archive
m/advisories/28973 - http://www.securityfocus.com/archive/1/485028/100/0/threaded - http://www.securityfocus.com/archive/1/429731/100/0/threaded - http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html - https://www.exploit-db.com/exploits/4730 - http://www.securityfocus.com/bid/26862 - http://www.osvdb.org/24773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25673 - https://exchange.xforce.ibmcloud.com/vulnerabilities/39038
CVE ID: CVE-2006-1621 State: PUBLISHED Published: 2006-04-05T10:00:00 Last Updated: 2024-08-07T17:19:49.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/folders/saveuploadfiles.asp in Hosting Controller 2002 RC 1 allows remote authenticated users to overwrite arbitrary files via an absolute path in the OpenPath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25675 - http://www.securityfocus.com/archive/1/429731/100/0/threaded - http://www.osvdb.org/24772
CVE ID: CVE-2006-1622 State: PUBLISHED Published: 2006-04-05T10:00:00 Last Updated: 2024-08-07T17:19:49.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHPSelect linksubmit allows remote attackers to inject arbitrary web script or HTML via (1) the description parameter to linklist.php and possibly other vectors involving (2) index.php and (3) linksubmit.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429608/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25607
CVE ID: CVE-2006-1623 State: PUBLISHED Published: 2006-04-05T10:00:00 Last Updated: 2024-08-07T17:19:48.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in main.php in an unspecified "file created by Andries Bruinsma," possibly a FleXiBle Development (FXB) application, allows remote attackers to include and execute arbitrary PHP code. NOTE: this disclosure is extremely vague and has very little information about the specific vulnerability type. In addition, there is little public information on the named product. Finally, an XSS vector is implied in the subject line, but because there is no other information and evidence of a cut-and-paste error, it w
or is implied in the subject line, but because there is no other information and evidence of a cut-and-paste error, it will not be assigned a separate CVE identifier unless additional information is provided. Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2006-April/000680.html - http://www.securityfocus.com/archive/1/429613/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25603 - http://www.securityfocus.com/archive/1/430334/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25600
CVE ID: CVE-2006-1624 State: PUBLISHED Published: 2006-04-05T10:00:00 Last Updated: 2024-08-07T17:19:49.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of syslogd in the Linux sysklogd package does not enable the -x (disable name lookups) option, which allows remote attackers to cause a denial of service (traffic amplification) via messages with spoofed source IP addresses. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429618/100/0/threaded - http://www.securityfocus.com/archive/1/429739/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25672
CVE ID: CVE-2006-1625 State: PUBLISHED Published: 2006-04-05T10:00:00 Last Updated: 2024-08-07T17:19:49.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode email tag, as demonstrated using the onmousemove event. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17368 - http://secunia.com/advisories/19516 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25615 - http://www.osvdb.org/24375 - http://www.vupen.com/english/advisories/20
ange.xforce.ibmcloud.com/vulnerabilities/25615 - http://www.osvdb.org/24375 - http://www.vupen.com/english/advisories/2006/1216 - http://www.securityfocus.com/archive/1/429748/100/0/threaded
CVE ID: CVE-2006-1626 State: PUBLISHED Published: 2006-04-05T10:00:00 Last Updated: 2024-08-07T17:19:49.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: this is a different vulnerability than CVE-2006-1192. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/Internet_Explorer_Address_Bar_Spoofing_Vulnerability_Test/ - http://www.securit
tainer: References: - http://secunia.com/Internet_Explorer_Address_Bar_Spoofing_Vulnerability_Test/ - http://www.securityfocus.com/bid/17404 - http://www.vupen.com/english/advisories/2006/2319 - http://securitytracker.com/id?1016291 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1842 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1881 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1604 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1806 - http://www.vupen.com/english/advisories/2006/1218 - https://docs.microsoft.com/en-us/secu
Aorg.mitre.oval%3Adef%3A1806 - http://www.vupen.com/english/advisories/2006/1218 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021 - http://secunia.com/advisories/19521 - http://www.securityfocus.com/archive/1/429719/100/0/threaded - http://www.securityfocus.com/archive/1/440851/100/100/threaded - http://www.securityfocus.com/archive/1/429891/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1600 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1918 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25634
CVE ID: CVE-2006-1627 State: PUBLISHED Published: 2006-04-13T18:00:00 Last Updated: 2024-08-07T17:19:48.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Document Server for Reader Extensions 6.0 does not provide proper access control, which allows remote authenticated users to perform privileged actions by modifying the (1) actionID and (2) pageID parameters. NOTE: due to an error during reservation, this identifier was inadvertently associated with multiple issues. Other CVE identifiers have been assigned to handle other problems that are covered by the same disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive
e same disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/430869/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25769 - http://www.adobe.com/support/techdocs/322699.html - http://securitytracker.com/id?1015905 - http://secunia.com/advisories/15924 - http://secunia.com/secunia_research/2005-68/advisory/ - http://www.vupen.com/english/advisories/2006/1342 - http://www.securityfocus.com/bid/17500
CVE ID: CVE-2006-1628 State: PUBLISHED Published: 2006-04-13T18:00:00 Last Updated: 2024-08-07T17:19:49.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe LiveCycle Workflow 7.01 and LiveCycle Forum Manager 7.01 allows users to authenticate and perform privileged actions when their account is marked "OBSOLETE" but the account is also active, within the authentication system. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/techdocs/333036.html - http://securitytracker.com/id?1015906 - http://secunia.com/advisories/19620 - http://www.vupen.com/english/advisories/2006/1343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/257
ies/19620 - http://www.vupen.com/english/advisories/2006/1343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25779 - http://www.securityfocus.com/bid/17511