Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4484 State: PUBLISHED Published: 2006-08-31T21:00:00 Last Updated: 2024-08-07T19:14:47.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/28768 - http://securitytracker.com/id?1016984 - http://www.securityfocus.com/archive/1/487683/100/0/threaded - http://www.php.net/release_5_1_5.php -
r.com/id?1016984 - http://www.securityfocus.com/archive/1/487683/100/0/threaded - http://www.php.net/release_5_1_5.php - https://issues.rpath.com/browse/RPL-683 - http://secunia.com/advisories/21768 - http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/gd_gif_in.c?r1=1.10&r2=1.11 - http://secunia.com/advisories/29546 - http://wiki.rpath.com/Advisories:rPSA-2008-0046 - https://issues.rpath.com/browse/RPL-2218 - http://secunia.com/advisories/29157 - http://secunia.com/advisories/22487 - http://www.ubuntu.com/usn/usn-342-1 - http://secunia.com/advisories/29242 - http://secunia.com/advisories/22039 - http://www.turbolinux.com/security/2006/TLSA-2006-38.txt - http://secunia.com/advisories/28845 -
com/advisories/22039 - http://www.turbolinux.com/security/2006/TLSA-2006-38.txt - http://secunia.com/advisories/28845 - http://rhn.redhat.com/errata/RHSA-2006-0688.html - https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00502.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:162 - http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html - http://www.securityfocus.com/bid/19582 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:077 - http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm - http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/gd_gif_in.c?view=log - http://secunia.com/advisories/22538 - http://secunia.com
.php.net/viewvc.cgi/php-src/ext/gd/libgd/gd_gif_in.c?view=log - http://secunia.com/advisories/22538 - http://secunia.com/advisories/21546 - http://secunia.com/advisories/22440 - http://www.securityfocus.com/archive/1/447866/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9004 - http://secunia.com/advisories/22069 - http://www.vupen.com/english/advisories/2006/3318 - http://secunia.com/advisories/22225 - http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0046 - http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm - http://secunia.com/advisories/28959 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:038 - http://www.redh
http://secunia.com/advisories/28959 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:038 - http://www.redhat.com/support/errata/RHSA-2008-0146.html - http://www.php.net/ChangeLog-5.php#5.1.5 - http://secunia.com/advisories/28838 - ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc - http://www.securityfocus.com/archive/1/488008/100/0/threaded - http://secunia.com/advisories/21842 - http://secunia.com/advisories/28866 - http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html - http://bugs.php.net/bug.php?id=38112 - https://bugzilla.redhat.com/show_bug.cgi?id=431568 - http://www.novell.com/linux/security/advisories/2008_13_sr.html - http:/
://bugzilla.redhat.com/show_bug.cgi?id=431568 - http://www.novell.com/linux/security/advisories/2008_13_sr.html - http://www.novell.com/linux/security/advisories/2006_52_php.html - http://secunia.com/advisories/30717
CVE ID: CVE-2006-4485 State: PUBLISHED Published: 2006-08-31T21:00:00 Last Updated: 2024-08-07T19:14:47.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016984 - http://www.php.net/release_5_1_5.php - http://rhn.redhat.com/errata/RHSA-2006-0688.html - http://www.ubuntu.com/usn/usn-362-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:162 - http://www.securityfocus.com/bid/19582 - http://secunia.com/advisories/22538 - http://secunia.com/advisories/21546 - htt
http://www.securityfocus.com/bid/19582 - http://secunia.com/advisories/22538 - http://secunia.com/advisories/21546 - http://www.vupen.com/english/advisories/2006/3318 - http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm - http://secunia.com/advisories/22331 - http://secunia.com/advisories/21842
CVE ID: CVE-2006-4486 State: PUBLISHED Published: 2006-08-31T21:00:00 Last Updated: 2024-08-07T19:14:47.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016984 - https://issues.rpath.com/browse/RPL-683 - http://www.redhat.com/support/errata/RHSA-2006-0669.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11086 - http://secunia.com/advisories/22487 - http://support.av
pository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11086 - http://secunia.com/advisories/22487 - http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm - http://www.turbolinux.com/security/2006/TLSA-2006-38.txt - http://rhn.redhat.com/errata/RHSA-2006-0688.html - http://www.hardened-php.net/hphp/changelog.html#hardening_patch_0.4.14 - http://www.ubuntu.com/usn/usn-362-1 - http://www.securityfocus.com/bid/19582 - http://www.php.net/ChangeLog-5.php#5.1.6 - http://secunia.com/advisories/22004 - http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm - http://secunia.com/advisories/22538 - http://www.redhat.com/support/errata/RHSA-2006-0682.html - http://secunia.com/advisories/2
ecunia.com/advisories/22538 - http://www.redhat.com/support/errata/RHSA-2006-0682.html - http://secunia.com/advisories/21546 - http://secunia.com/advisories/22440 - http://www.securityfocus.com/archive/1/447866/100/0/threaded - http://www.debian.org/security/2007/dsa-1331 - http://secunia.com/advisories/22069 - http://secunia.com/advisories/22225 - http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm - http://secunia.com/advisories/25945 - http://secunia.com/advisories/22331 - http://www.php.net/release_5_1_6.php - ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc - http://www.novell.com/linux/security/advisories/2006_52_php.html
CVE ID: CVE-2006-4487 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:47.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: DUware DUpoll 3.0 and 3.1 stores _private/Dupoll.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28253 - http://www.vupen.com/english/advisories/2006/3416 - http://www.securityfocus.com/archive/1/444682/100/0/threaded - http://securityreason.com/securityalert/1482 - http://secunia.com/advisories/21670 - https://exchange.xforce.ibmc
aded - http://securityreason.com/securityalert/1482 - http://secunia.com/advisories/21670 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28642
CVE ID: CVE-2006-4488 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:47.276Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/userstop/userstop.php in ExBB Italia 0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the exbb[home_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21681 - http://exbb.clans.it/forum/announcements.php - https://www.exploit-db.com/exploits/2273 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28624 - http://www.securityfocus.com/bid/19753 -
m/exploits/2273 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28624 - http://www.securityfocus.com/bid/19753 - http://www.osvdb.org/28251 - http://www.vupen.com/english/advisories/2006/3412
CVE ID: CVE-2006-4489 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:47.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 (1.2.2) allow remote attackers to execute arbitrary PHP code via (1) a URL in the config[include_dir] parameter in actions/ipn.php or (2) an FTP path in the config[plugin_dir] parameter in include/initPlugins.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19568 - http://www.osvdb.org/28258 - https://www.exploit-db.com/exploits/2272 - http://www.ultrize.com/minibill/index.php - https://exchange.xforc
rg/28258 - https://www.exploit-db.com/exploits/2272 - http://www.ultrize.com/minibill/index.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/28625 - http://secunia.com/advisories/21688 - http://www.osvdb.org/28259 - http://www.vupen.com/english/advisories/2006/3413 - http://www.ultrize.com/minibill/index.php?page=changelog - http://www.attrition.org/pipermail/vim/2006-November/001115.html - http://securitytracker.com/id?1016769
CVE ID: CVE-2006-4490 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:47.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 allow remote authenticated users to read arbitrary files via a .. (dot dot) sequence via the id parameter in (1) scripts/cbag/ag.exe or (2) scripts/s360v2/s360.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28261 - http://secunia.com/advisories/21618 - http://secunia.com/advisories/21623 - http://jvn.jp/jp/JVN%2390420168/index.html - http://cybozu.co.jp/products/dl/no
- http://secunia.com/advisories/21623 - http://jvn.jp/jp/JVN%2390420168/index.html - http://cybozu.co.jp/products/dl/notice_060825/ - http://www.osvdb.org/28262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28591 - http://securitytracker.com/id?1016759 - http://vuln.sg/cybozu-en.html
CVE ID: CVE-2006-4491 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:47.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/jp/JVN%2390420168/index.html - http://cybozu.co.jp/products/dl/notice_060825/ - http://www.osvdb.org/28262 - http://securitytracker.com/id?1016759 - http://secunia.com/advisories/21638 - http://secunia.com/adviso
svdb.org/28262 - http://securitytracker.com/id?1016759 - http://secunia.com/advisories/21638 - http://secunia.com/advisories/21656
CVE ID: CVE-2006-4492 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:46.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cybozu Office 6.5 Build 1.2 for Windows allows remote attackers to obtain sensitive information, including users and groups, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21623 - http://jvn.jp/jp/JVN%2331125599/index.html - http://www.osvdb.org/28263
CVE ID: CVE-2006-4493 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:47.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: xbiff2 1.9 creates $HOME/.xbiff2rc in a user's home directory with insecure file permissions, which allows local users to obtain sensitive information such as login credentials. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21686 - http://www.osvdb.org/28278 - http://www.vupen.com/english/advisories/2006/3417 - http://www.securityfocus.com/bid/19762 - https://exchange.xfor
278 - http://www.vupen.com/english/advisories/2006/3417 - http://www.securityfocus.com/bid/19762 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28680
CVE ID: CVE-2006-4494 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:47.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Visual Studio 6.0 ActiveX COM Objects in Internet Explorer, including (1) tcprops.dll, (2) fp30wec.dll, (3) mdt2db.dll, (4) mdt2qd.dll, and (5) vi30aut.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/443499/100/100/threaded - http://www.xsec.org/index.php?module=releases&act=view&type=1&id=15 - http://www.se
/archive/1/443499/100/100/threaded - http://www.xsec.org/index.php?module=releases&act=view&type=1&id=15 - http://www.securityfocus.com/bid/19572 - http://securityreason.com/securityalert/1473
CVE ID: CVE-2006-4495 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:47.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including (1) ciodm.dll, (2) myinfo.dll, (3) msdxm.ocx, and (4) creator.dll. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1474 - http://www.securityfocus.com/bid/19636 - http://www.securityfocus.com/archive/1/443896/100/100/threaded - http://www.xsec.org/index.php?module=Relea
/bid/19636 - http://www.securityfocus.com/archive/1/443896/100/100/threaded - http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=16 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28512
CVE ID: CVE-2006-4496 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:47.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to inject arbitrary web script or HTML via the comment parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28663 - http://securityreason.com/securityalert/1476 - http://www.securityfocus.com/archive/1/444744/100/0/threaded
CVE ID: CVE-2006-4497 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:47.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28665 - http://www.securityfocus.com/bid/19757 - http://www.securityfocus.com/archive/1/444744/100/0/threaded - http://securityreason.com/securityalert/1480
CVE ID: CVE-2006-4498 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:47.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in sommaire_admin.php in PhpAlbum (mod_phpalbum) 2.15 for PortailPHP allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter, a different vector than CVE-2006-3922. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444684/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28626 - http://securityreason.com/securityalert/1477 - https://www.exploit-db.com/exploits/2271 - http://www.secur
ities/28626 - http://securityreason.com/securityalert/1477 - https://www.exploit-db.com/exploits/2271 - http://www.securityfocus.com/bid/19750
CVE ID: CVE-2006-4499 State: PUBLISHED Published: 2006-08-31T22:00:00Z Last Updated: 2024-09-16T23:01:05.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: ModernBill 5.0.4 and earlier uses cURL with insecure settings for CURLOPT_SSL_VERIFYPEER and CURLOPT_SSL_VERIFYHOST that do not verify SSL certificates, which allows remote attackers to read network traffic via a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21663 - http://www.justinsamuel.com/security-vulnerabilities/12/vulnerability-modernbill-insecure-curl-settings
CVE ID: CVE-2006-4500 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:47.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) about, (2) again, (3) lastname, (4) email, (5) password, (6) album, (7) id, (8) table, (9) desc, (10) doc, (11) mname, (12) max, (13) htpl, (14) pheader, and possibly other parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444743/100/0/threaded - http://securityreason.com/securityalert/1481 - https://exchange.x
ww.securityfocus.com/archive/1/444743/100/0/threaded - http://securityreason.com/securityalert/1481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28666 - http://www.securityfocus.com/bid/19759
CVE ID: CVE-2006-4501 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:47.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) about, (2) album, (3) id, (4) use, (5) desc, (6) doc, (7) mname, (8) max, and possibly other parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444743/100/0/threaded - http://securityreason.com/securityalert/1481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28667 - http://www.securityfocus.com/bid/19759
CVE ID: CVE-2006-4502 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:47.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: ezPortal/ztml CMS 1.0 allows remote attackers to bypass authentication controls via a direct request to the "Administration Area" script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444743/100/0/threaded - http://securityreason.com/securityalert/1481 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28668 - http://www.securityfocus.com/bid/19759
CVE ID: CVE-2006-4503 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:46.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in link.php in NX5Linx 1.0 allows remote attackers to read arbitrary files via the logo parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21922 - http://www.evuln.com/vulns/138/ - http://www.securityfocus.com/bid/20008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28598 - http://www.securityfocus.com/archive/1/445916/100/0/threaded - http://www.vupen.com/english/advisories/2006/3631
CVE ID: CVE-2006-4504 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:47.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in NX5Linx 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) c and (2) l parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21922 - http://www.evuln.com/vulns/138/ - http://www.securityfocus.com/bid/20010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28602 - http://www.securityfocus.com/archive/1/445916/100/0/threaded - http://www.vupen.com/english/advisories/2006/3631
CVE ID: CVE-2006-4505 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T19:14:47.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in links.php in NX5Linx 1.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a CRLF sequence in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21922 - http://www.evuln.com/vulns/138/ - http://www.securityfocus.com/bid/20011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28634 - http://www.securityfocus.com/archive/1/445916/100/0/threaded - http://www.vupen.com/english/a
om/vulnerabilities/28634 - http://www.securityfocus.com/archive/1/445916/100/0/threaded - http://www.vupen.com/english/advisories/2006/3631
CVE ID: CVE-2006-4506 State: PUBLISHED Published: 2006-08-31T23:00:00Z Last Updated: 2024-09-17T00:01:56.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: idmlib.sh in nxdrv in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecified vectors, possibly involving the " (quote) and \ (backslash) characters and eval injection. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016741 - http://www.securityfocus.com/bid/19688 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974299.htm
CVE ID: CVE-2006-4507 State: PUBLISHED Published: 2006-08-31T23:00:00 Last Updated: 2024-08-07T19:14:47.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the TIFF viewer (possibly libTIFF) in the Photo Viewer in the Sony PlaystationPortable (PSP) 2.00 through 2.80 allows local users to execute arbitrary code via crafted TIFF images. NOTE: due to lack of details, it is not clear whether this is related to other issues such as CVE-2006-3464 or CVE-2006-3465. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28689 - http://www.vupen.com/english/advisories/2006/3419 - http://secunia.com
hange.xforce.ibmcloud.com/vulnerabilities/28689 - http://www.vupen.com/english/advisories/2006/3419 - http://secunia.com/advisories/21672 - http://noobz.eu/content/home.html#280806
CVE ID: CVE-2006-4508 State: PUBLISHED Published: 2006-08-31T23:00:00 Last Updated: 2024-08-07T19:14:47.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in (1) Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and (2) ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause a denial of service (flood) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21725 - http://www.securityfocus.com/bid/19785 - http://www.scatterchat.com/advisories/2006-02_tech.html - http://archives.seul.org/or/announce/Aug-2006/
com/bid/19785 - http://www.scatterchat.com/advisories/2006-02_tech.html - http://archives.seul.org/or/announce/Aug-2006/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28686 - http://secunia.com/advisories/21708