Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2010 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in check_login.asp in Bloggage allow remote attackers to execute arbitrary SQL commands via the (1) acc_name and (2) password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19751 - http://www.osvdb.org/24797 - http://www.securityfocus.com/bid/17639 - http://www.vupen.com/english/advisories/2006/1448 - http://colander.altervista.org/advisory/bloggage.txt - http://www.securityfocus.com/archive/1/431673/100/0/threaded - http://securi
nder.altervista.org/advisory/bloggage.txt - http://www.securityfocus.com/archive/1/431673/100/0/threaded - http://securityreason.com/securityalert/751 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25955
CVE ID: CVE-2006-2011 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in member.php in 4images 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the nickname, probably involving the user_name parameter in register.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19745 - http://www.osvdb.org/24796 - http://www.vupen.com/english/advisories/2006/1449 - http://www.securityfocus.com/bid/17625 - http://www.securityfocus.com/archive/1/431599/100/0/threaded - https://exchange.xfor
//www.securityfocus.com/bid/17625 - http://www.securityfocus.com/archive/1/431599/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25987
CVE ID: CVE-2006-2012 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Skulltag 0.96f and earlier allows remote attackers to cause a denial of service via the version string. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19767 - http://www.securityfocus.com/archive/1/431872/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25988 - http://www.vupen.com/english/advisories/2006/1479 - http://www.securityfocus.com/bid/17659 - http://aluigi.altervista.org/adv/skulltagfs-adv.txt
CVE ID: CVE-2006-2013 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in page.php in SL_site 1.0 allows remote attackers to execute arbitrary SQL commands via the id_page parameter. NOTE: this issue could be used to produce resultant XSS from an error message. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015972 - http://www.osvdb.org/24896 - http://www.vupen.com/english/advisories/2006/1487 - http://secunia.com/advisories/19792 - http://www.securityfocus.com/bid/17667 - https://exchange.xforce.ibmcloud.com/vulnerabili
secunia.com/advisories/19792 - http://www.securityfocus.com/bid/17667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26036
CVE ID: CVE-2006-2014 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in gallerie.php in SL_site 1.0 allows remote attackers to list images in arbitrary directories via ".." sequences in the rep parameter, which is used to construct a directory name in admin/config.inc.php. NOTE: this issue could be used to produce resultant XSS from an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17672 - http://securitytracker.com/id?1015972 - http://www.osvdb.org/24897 - http://www.vupen.com/english/advisories
bid/17672 - http://securitytracker.com/id?1015972 - http://www.osvdb.org/24897 - http://www.vupen.com/english/advisories/2006/1487 - http://secunia.com/advisories/19792 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26037 - http://www.securityfocus.com/bid/17667
CVE ID: CVE-2006-2015 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SL_site 1.0 allows remote attackers to inject arbitrary web script or HTML via the recherche parameter in recherche.php. NOTE: other XSS vectors, as reported in the original disclosure, are resultant from other primary vulnerabilities that have separate CVE names. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24898 - http://securitytracker.com/id?1015972 - http://www.vupen.com/english/advisories/2006/1487 - http://secunia.com/advisories/19792 -
curitytracker.com/id?1015972 - http://www.vupen.com/english/advisories/2006/1487 - http://secunia.com/advisories/19792 - http://www.securityfocus.com/bid/17667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26038
CVE ID: CVE-2006-2016 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpLDAPadmin 0.9.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dn parameter in (a) compare_form.php, (b) copy_form.php, (c) rename_form.php, (d) template_engine.php, and (e) delete_form.php; (2) scope parameter in (f) search.php; and (3) Container DN, (4) Machine Name, and (5) UID Number fields in (g) template_engine.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17643 - https
ine.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25959 - http://secunia.com/advisories/19747 - http://secunia.com/advisories/20124 - http://www.vupen.com/english/advisories/2006/1450 - http://www.osvdb.org/24790 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25958 - http://www.osvdb.org/24793 - http://www.osvdb.org/24792 - http://www.osvdb.org/24789 - http://www.osvdb.org/24788 - http://pridels0.blogspot.com/2006/04/phpldapadmin-multiple-vuln.html - http://www.osvdb.org/24794 - http://www.debian.org/security/2006/dsa-1057
CVE ID: CVE-2006-2017 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dnsmasq 2.29 allows remote attackers to cause a denial of service (application crash) via a DHCP client broadcast reply request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19760 - http://www.vupen.com/english/advisories/2006/1494 - http://www.osvdb.org/24884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26005 - http://www.securityfocus.com/bid/17662 - http://thekelleys.org.uk/dnsmasq/CHANGELOG
CVE ID: CVE-2006-2018 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL commands via the eventid parameter. NOTE: the affected version has been disputed by the vendor. It appears that this is the same issue as CVE-2004-0036, which was fixed in 2.3.4. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431951/30/5370/threaded - http://www.securityfocus.com/archive/1/431901
CVE ID: CVE-2006-2019 State: PUBLISHED Published: 2006-04-25T17:00:00 Last Updated: 2024-08-07T17:35:31.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Mac OS X Safari 2.0.3, 1.3.1, and possibly other versions allows remote attackers to cause a denial of service (CPU consumption and crash) via a TD element with a large number in the rowspan attribute. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17674 - http://www.securityfocus.com/archive/1/431944/100/0/threaded - http://securitytracker.com/id?1015982 - https://www.exploit-db.com/exploits/1715 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045472.htm
82 - https://www.exploit-db.com/exploits/1715 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045472.html - http://www.securityfocus.com/archive/1/431874/100/0/threaded - http://www.vupen.com/english/advisories/2006/1508 - http://secunia.com/advisories/19763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25998
CVE ID: CVE-2006-2020 State: PUBLISHED Published: 2006-04-25T20:00:00 Last Updated: 2024-08-07T17:35:31.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asterisk Recording Interface (ARI) in Asterisk@Home before 2.8 stores recordings/includes/main.conf under the web document root with insufficient access control, which allows remote attackers to obtain password information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431655/100/0/threaded - http://www.vupen.com/english/advisories/2006/1457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25993 - http://secunia.com/advisories/19744 - http://www.osvdb.org/24805 -
exchange.xforce.ibmcloud.com/vulnerabilities/25993 - http://secunia.com/advisories/19744 - http://www.osvdb.org/24805 - http://www.securityfocus.com/bid/17641 - http://www.securiweb.net/wiki/Ressources/AvisDeSecurite/2006.1
CVE ID: CVE-2006-2021 State: PUBLISHED Published: 2006-04-25T20:00:00 Last Updated: 2024-08-07T17:35:31.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in recordings/misc/audio.php in the Asterisk Recording Interface (ARI) web interface in Asterisk@Home before 2.8 allows remote attackers to read arbitrary MP3, WAV, and GSM files via a full pathname in the recording parameter. NOTE: this issue can also be used to determine existence of files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431655/100/0/threaded - http://www.vupen.com/english/advisories/2006/1457 - http://secunia.com/a
rityfocus.com/archive/1/431655/100/0/threaded - http://www.vupen.com/english/advisories/2006/1457 - http://secunia.com/advisories/19744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25996 - http://securityreason.com/securityalert/750 - http://www.securityfocus.com/bid/17641 - http://www.securiweb.net/wiki/Ressources/AvisDeSecurite/2006.1 - http://www.osvdb.org/24806
CVE ID: CVE-2006-2022 State: PUBLISHED Published: 2006-04-25T20:00:00 Last Updated: 2024-08-07T17:35:31.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the parse_url function in the RTSP module (rtsp/parse_url.c) in Fenice 1.10 and earlier allows remote attackers to execute arbitrary code via a long URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19770 - http://www.securityfocus.com/bid/17678 - http://aluigi.altervista.org/adv/fenicex-adv.txt - http://www.securityfocus.com/archive/1/431870/100/0/threaded - http://securityreason.com/securityalert/794 - http://www.securityfocus.com/archive/1/432002/100/0/thr
0/100/0/threaded - http://securityreason.com/securityalert/794 - http://www.securityfocus.com/archive/1/432002/100/0/threaded - http://www.vupen.com/english/advisories/2006/1491 - http://www.securityfocus.com/archive/1/436256/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26078
CVE ID: CVE-2006-2023 State: PUBLISHED Published: 2006-04-25T20:00:00 Last Updated: 2024-08-07T17:35:31.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the RTSP_msg_len function in rtsp/RTSP_msg_len.c in Fenice 1.10 and earlier allows remote attackers to cause a denial of service (application crash) via a large HTTP Content-Length value, which leads to an invalid memory access. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19770 - http://www.securityfocus.com/bid/17678 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26080 - http://aluigi.altervista.org/adv/fenicex-adv.txt - http://www.securityfocus.co
orce.ibmcloud.com/vulnerabilities/26080 - http://aluigi.altervista.org/adv/fenicex-adv.txt - http://www.securityfocus.com/archive/1/431870/100/0/threaded - http://securityreason.com/securityalert/794 - http://www.vupen.com/english/advisories/2006/1491 - http://www.securityfocus.com/archive/1/436256/100/0/threaded - http://www.osvdb.org/24882
CVE ID: CVE-2006-2024 State: PUBLISHED Published: 2006-04-25T23:00:00 Last Updated: 2024-08-07T17:35:31.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in libtiff before 3.8.1 allow context-dependent attackers to cause a denial of service via a TIFF image that triggers errors in (1) the TIFFFetchAnyArray function in (a) tif_dirread.c; (2) certain "codec cleanup methods" in (b) tif_lzw.c, (c) tif_pixarlog.c, and (d) tif_zip.c; (3) and improper restoration of setfield and getfield methods in cleanup functions within (e) tif_jpeg.c, tif_pixarlog.c, (f) tif_fax3.c, and tif_zip.c. Additional Analyst Notes: - CVE Program Container: References: - https://exc
_pixarlog.c, (f) tif_fax3.c, and tif_zip.c. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26133 - http://secunia.com/advisories/19851 - http://www.vupen.com/english/advisories/2006/1563 - http://secunia.com/advisories/20210 - http://secunia.com/advisories/19949 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1 - https://usn.ubuntu.com/277-1/ - http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml - http://secunia.com/advisories/20667 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9893 - http://bug
isories/20667 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9893 - http://bugzilla.remotesensing.org/show_bug.cgi?id=1102 - http://secunia.com/advisories/19936 - http://secunia.com/advisories/19964 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1 - http://www.trustix.org/errata/2006/0024 - http://secunia.com/advisories/20345 - http://www.debian.org/security/2006/dsa-1054 - ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc - http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm - http://www.redhat.com/support/errata/RHSA-2006-0425.html - http://secunia.com/advisories/19838 - http://secunia.com/advisori
://www.redhat.com/support/errata/RHSA-2006-0425.html - http://secunia.com/advisories/19838 - http://secunia.com/advisories/20021 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:082 - http://secunia.com/advisories/19897 - http://secunia.com/advisories/20023 - http://www.novell.com/linux/security/advisories/2006_04_28.html - http://www.securityfocus.com/bid/17730
CVE ID: CVE-2006-2025 State: PUBLISHED Published: 2006-04-25T23:00:00 Last Updated: 2024-08-07T17:35:31.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the TIFFFetchData function in tif_dirread.c for libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1563 - http://secunia.com/advisories/20210 - http://secunia.com/advisories/19949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26134 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933 - h
s://exchange.xforce.ibmcloud.com/vulnerabilities/26134 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1 - https://usn.ubuntu.com/277-1/ - http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml - http://secunia.com/advisories/20667 - http://bugzilla.remotesensing.org/show_bug.cgi?id=1102 - http://secunia.com/advisories/19936 - http://secunia.com/advisories/19964 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1 - http://www.trustix.org/errata/2006/0024 - http://secunia.com/advisories/20345 - http://www.debian.org/security/2006/dsa-1054 - ftp://patches.sgi.com/support/free/security/advisories/
dvisories/20345 - http://www.debian.org/security/2006/dsa-1054 - ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc - http://www.securityfocus.com/bid/17732 - http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm - http://www.redhat.com/support/errata/RHSA-2006-0425.html - http://secunia.com/advisories/19838 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10593 - http://secunia.com/advisories/20021 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:082 - http://secunia.com/advisories/19897 - http://secunia.com/advisories/20023 - http://www.novell.com/linux/security/advisories/2006_04_28.html
CVE ID: CVE-2006-2026 State: PUBLISHED Published: 2006-04-25T23:00:00 Last Updated: 2024-08-07T17:35:31.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in tif_jpeg.c in libtiff before 3.8.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image that triggers errors related to "setfield/getfield methods in cleanup functions." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1563 - http://secunia.com/advisories/20210 - http://secunia.com/advisories/19949 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933
om/advisories/20210 - http://secunia.com/advisories/19949 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189933 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103099-1 - https://usn.ubuntu.com/277-1/ - http://www.gentoo.org/security/en/glsa/glsa-200605-17.xml - http://secunia.com/advisories/20667 - http://bugzilla.remotesensing.org/show_bug.cgi?id=1102 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26135 - http://secunia.com/advisories/19936 - http://secunia.com/advisories/19964 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201332-1 - http://www.trustix.org/errata/2006/0024 - http://secunia.com/advisories/20345 - http://www.debian.org/security/2006/ds
- http://www.trustix.org/errata/2006/0024 - http://secunia.com/advisories/20345 - http://www.debian.org/security/2006/dsa-1054 - ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc - http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11389 - http://www.redhat.com/support/errata/RHSA-2006-0425.html - http://secunia.com/advisories/19838 - http://secunia.com/advisories/20021 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:082 - http://secunia.com/advisories/19897 - http://secunia.com/advisories/20023 - http://www.novell.com/linux/security/advisories/2006_04_28.ht
m/advisories/19897 - http://secunia.com/advisories/20023 - http://www.novell.com/linux/security/advisories/2006_04_28.html - http://www.securityfocus.com/bid/17733
CVE ID: CVE-2006-2027 State: PUBLISHED Published: 2006-04-26T00:00:00 Last Updated: 2024-08-07T17:35:31.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Unicode processing in the logging functionality in Pablo Software Solutions Quick 'n Easy FTP Server Professional and Lite, probably 3.0, allows remote authenticated users to execute arbitrary code by sending a command with a long argument, which triggers a buffer overflow when an admin selects the Logging section in the FTP server main window. NOTE: the original researcher claims that the vendor disputes this issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.co
vendor disputes this issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17681 - http://www.securityfocus.com/archive/1/431920/100/0/threaded - http://securityreason.com/securityalert/788 - http://www.osvdb.org/25235
CVE ID: CVE-2006-2028 State: PUBLISHED Published: 2006-04-26T00:00:00 Last Updated: 2024-08-07T17:35:31.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in imagelist.php in Jeremy Ashcraft Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the imagedir parameter. NOTE: this issue might be resultant from directory traversal. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431760/100/0/threaded - http://secunia.com/advisories/19764 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25984 - http://www.vupen.com/english/advisories/2006/1493
s/19764 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25984 - http://www.vupen.com/english/advisories/2006/1493 - http://www.nukedx.com/?getxpl=25 - http://www.osvdb.org/24880 - http://securityreason.com/securityalert/799 - http://www.securityfocus.com/bid/17653 - http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0649.html
CVE ID: CVE-2006-2029 State: PUBLISHED Published: 2006-04-26T00:00:00 Last Updated: 2024-08-07T17:35:31.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter in (a) preview.php; the (2) cid, (3) pid, and (4) eid parameters in (b) archive.php; and the (5) pid parameter in (c) comments.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24877 - http://www.osvdb.org/24879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25982 - http://www.simplog.org/archive.php?blogid=1&pid=5
g/24879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25982 - http://www.simplog.org/archive.php?blogid=1&pid=57 - http://www.securityfocus.com/archive/1/431760/100/0/threaded - http://secunia.com/advisories/19764 - http://www.vupen.com/english/advisories/2006/1493 - http://www.nukedx.com/?getxpl=25 - http://securitytracker.com/id?1015976 - http://securityreason.com/securityalert/799 - http://www.osvdb.org/24878 - http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0649.html
CVE ID: CVE-2006-2030 State: PUBLISHED Published: 2006-04-26T00:00:00 Last Updated: 2024-08-07T17:35:31.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Allied Telesyn AT-9724TS switch allows remote attackers to cause a denial of service via a large amount of UDP data to the switch, which leads to unstable operation and possibly failure of the management interface or routing. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431586/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25938
CVE ID: CVE-2006-2031 State: PUBLISHED Published: 2006-04-26T00:00:00 Last Updated: 2024-08-07T17:35:31.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin 2.8.0.3, 2.8.0.2, 2.8.1-dev, and 2.9.0-dev allows remote attackers to inject arbitrary web script or HTML via the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19659 - http://pridels0.blogspot.com/2006/04/phpmyadmin-xss-vuln.html - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25954