Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-7226 State: PUBLISHED Published: 2007-12-03T20:00:00 Last Updated: 2024-08-07T20:57:40.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perl-Compatible Regular Expression (PCRE) library before 6.7 does not properly calculate the compiled memory allocation for regular expressions that involve a quantified "subpattern containing a named recursion or subroutine reference," which allows context-dependent attackers to cause a denial of service (error or crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2008:030 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html -
m/security/advisories?name=MDVSA-2008:030 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html - http://secunia.com/advisories/28658 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11545 - http://www.securityfocus.com/bid/26727 - http://support.avaya.com/elmodocs2/security/ASA-2007-505.htm - http://www.redhat.com/support/errata/RHSA-2007-1068.html - http://www.redhat.com/support/errata/RHSA-2007-1059.html - http://secunia.com/advisories/28041 - https://bugzilla.redhat.com/show_bug.cgi?id=384781 - http://www.pcre.org/changelog.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/40020
CVE ID: CVE-2006-7227 State: PUBLISHED Published: 2007-11-14T21:00:00 Last Updated: 2024-08-07T20:57:40.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 allows context-dependent attackers to execute arbitrary code via a regular expression containing a large number of named subpatterns (name_count) or long subpattern names (max_name_size), which triggers a buffer overflow. NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30219 - http://security.gentoo.or
al Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30219 - http://security.gentoo.org/glsa/glsa-200711-30.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10408 - http://support.avaya.com/elmodocs2/security/ASA-2007-493.htm - http://www.mandriva.com/security/advisories?name=MDVSA-2008:030 - http://www.debian.org/security/2008/dsa-1570 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html - http://secunia.com/advisories/28658 - http://secunia.com/advisories/27773 - http://secunia.com/advisories/28406 - http://www.securityfocus.com/bid/26462 - http://security.gentoo.org/glsa/glsa-200805-11.xm
ecunia.com/advisories/28406 - http://www.securityfocus.com/bid/26462 - http://security.gentoo.org/glsa/glsa-200805-11.xml - http://www.redhat.com/support/errata/RHSA-2007-1052.html - http://secunia.com/advisories/27741 - http://www.novell.com/linux/security/advisories/2007_62_pcre.html - http://www.pcre.org/changelog.txt - http://secunia.com/advisories/30155 - http://secunia.com/advisories/27869 - http://secunia.com/advisories/28720 - http://security.gentoo.org/glsa/glsa-200801-02.xml - http://secunia.com/advisories/27582 - http://bugs.gentoo.org/show_bug.cgi?id=198976 - http://scary.beasts.org/security/CESA-2007-006.html - http://security.gentoo.org/glsa/glsa-200801-19.xml - http://security
tp://scary.beasts.org/security/CESA-2007-006.html - http://security.gentoo.org/glsa/glsa-200801-19.xml - http://security.gentoo.org/glsa/glsa-200801-18.xml - http://secunia.com/advisories/28414 - http://secunia.com/advisories/30106 - http://secunia.com/advisories/28714
CVE ID: CVE-2006-7228 State: PUBLISHED Published: 2007-11-14T21:00:00 Last Updated: 2024-08-07T20:57:40.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Perl-Compatible Regular Expression (PCRE) library before 6.7 might allow context-dependent attackers to execute arbitrary code via a regular expression that involves large (1) min, (2) max, or (3) duplength values that cause an incorrect length calculation and trigger a buffer overflow, a different vulnerability than CVE-2006-7227. NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split. Additional Analyst Notes: - CVE Program Container: References: - https://bugz
but that CVE has been REJECTED and split. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=383371 - http://secunia.com/advisories/30219 - http://secunia.com/advisories/27776 - http://security.gentoo.org/glsa/glsa-200711-30.xml - http://lists.vmware.com/pipermail/security-announce/2008/000005.html - http://secunia.com/advisories/28050 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:030 - http://www.redhat.com/support/errata/RHSA-2008-0546.html - http://www.debian.org/security/2008/dsa-1570 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html - http://secunia.com/advisories/28658 - http://secunia
sts.opensuse.org/opensuse-security-announce/2008-01/msg00006.html - http://secunia.com/advisories/28658 - http://secunia.com/advisories/27773 - http://secunia.com/advisories/28406 - http://www.securityfocus.com/archive/1/490917/100/0/threaded - http://secunia.com/advisories/29032 - http://www.redhat.com/support/errata/RHSA-2007-1065.html - http://secunia.com/advisories/31124 - http://secunia.com/advisories/29085 - http://support.avaya.com/elmodocs2/security/ASA-2007-505.htm - http://www.redhat.com/support/errata/RHSA-2007-1077.html - http://www.securityfocus.com/archive/1/488457/100/0/threaded - http://www.securityfocus.com/bid/26462 - http://secunia.com/advisories/29785 - http://www.redhat.
88457/100/0/threaded - http://www.securityfocus.com/bid/26462 - http://secunia.com/advisories/29785 - http://www.redhat.com/support/errata/RHSA-2007-1076.html - http://www.redhat.com/support/errata/RHSA-2007-1068.html - http://www.vupen.com/english/advisories/2008/0637 - http://security.gentoo.org/glsa/glsa-200805-11.xml - http://www.redhat.com/support/errata/RHSA-2007-1059.html - http://www.vupen.com/english/advisories/2008/1234/references - http://secunia.com/advisories/28041 - http://security.gentoo.org/glsa/glsa-200802-10.xml - http://secunia.com/advisories/28027 - http://secunia.com/advisories/27741 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3
://secunia.com/advisories/27741 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10810 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:012 - http://www.novell.com/linux/security/advisories/2007_62_pcre.html - http://www.pcre.org/changelog.txt - http://secunia.com/advisories/30155 - http://www.redhat.com/support/errata/RHSA-2007-1063.html - http://secunia.com/advisories/28720 - http://security.gentoo.org/glsa/glsa-200801-02.xml - http://secunia.com/advisories/27582 - http://lists.vmware.com/pipermail/security-announce/2008/000014.html - http://bugs.gentoo.org/show_bug.cgi?id=198976 - http://scary.beasts.org/security/CESA-2007-006.html - ht
8/000014.html - http://bugs.gentoo.org/show_bug.cgi?id=198976 - http://scary.beasts.org/security/CESA-2007-006.html - http://security.gentoo.org/glsa/glsa-200801-19.xml - http://security.gentoo.org/glsa/glsa-200801-18.xml - http://secunia.com/advisories/28414 - http://secunia.com/advisories/30106 - http://secunia.com/advisories/28714
CVE ID: CVE-2006-7229 State: PUBLISHED Published: 2007-11-15T00:00:00.000Z Last Updated: 2025-04-03T15:00:16.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: The skge driver 1.5 in Linux kernel 2.6.15 on Ubuntu does not properly use the spin_lock and spin_unlock functions, which allows remote attackers to cause a denial of service (machine crash) via a flood of network traffic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/26511 - https://bugs.launchpad.net/ubuntu/+source/linux-source-2.6.15/+bug/65631 - http://secunia.com/advisories/28971 - http://www.ubuntu.com/usn/usn-578-1
CVE ID: CVE-2006-7230 State: PUBLISHED Published: 2007-11-15T19:00:00 Last Updated: 2024-08-07T20:57:40.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate the amount of memory needed for a compiled regular expression pattern when the (1) -x or (2) -i UTF-8 options change within the pattern, which allows context-dependent attackers to cause a denial of service (PCRE or glibc crash) via crafted regular expressions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30219 - https://bugzilla.redhat.com/show_bug.cgi?id=384801 - http://security.gentoo.or
: - http://secunia.com/advisories/30219 - https://bugzilla.redhat.com/show_bug.cgi?id=384801 - http://security.gentoo.org/glsa/glsa-200711-30.xml - http://www.mandriva.com/security/advisories?name=MDVSA-2008:030 - http://www.debian.org/security/2008/dsa-1570 - http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html - http://secunia.com/advisories/28658 - http://secunia.com/advisories/27773 - http://secunia.com/advisories/28406 - http://support.avaya.com/elmodocs2/security/ASA-2007-505.htm - http://www.redhat.com/support/errata/RHSA-2007-1068.html - http://security.gentoo.org/glsa/glsa-200805-11.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
/security.gentoo.org/glsa/glsa-200805-11.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10911 - http://www.redhat.com/support/errata/RHSA-2007-1059.html - http://www.securityfocus.com/bid/26550 - http://secunia.com/advisories/28041 - http://secunia.com/advisories/27741 - http://www.novell.com/linux/security/advisories/2007_62_pcre.html - http://www.pcre.org/changelog.txt - http://secunia.com/advisories/30155 - http://secunia.com/advisories/28720 - http://security.gentoo.org/glsa/glsa-200801-02.xml - http://bugs.gentoo.org/show_bug.cgi?id=198976 - http://security.gentoo.org/glsa/glsa-200801-19.xml - http://security.gentoo.org/glsa/glsa-200801-18.x
ug.cgi?id=198976 - http://security.gentoo.org/glsa/glsa-200801-19.xml - http://security.gentoo.org/glsa/glsa-200801-18.xml - http://secunia.com/advisories/28414 - http://secunia.com/advisories/30106 - http://secunia.com/advisories/28714
CVE ID: CVE-2006-7231 State: PUBLISHED Published: 2008-02-13T23:00:00 Last Updated: 2024-08-07T20:57:40.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in display.asp in Civica Software Civica allows remote attackers to execute arbitrary SQL commands via the Entry parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40305
CVE ID: CVE-2006-7232 State: PUBLISHED Published: 2008-02-26T18:00:00 Last Updated: 2024-08-07T20:57:40.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial of service (crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table, as originally demonstrated using ORDER BY. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html - http://dev.mysql.com/doc/refman/5.1/en/news-5-1-14.html - http://secunia.com/advisories/29443 - https://oval.cisecurity.org/repository/search/definit
an/5.1/en/news-5-1-14.html - http://secunia.com/advisories/29443 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11720 - http://secunia.com/advisories/31687 - http://bugs.mysql.com/bug.php?id=22413 - http://www.securityfocus.com/bid/28351 - http://secunia.com/advisories/30351 - http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-32.html - http://www.ubuntu.com/usn/usn-588-1 - http://www.redhat.com/support/errata/RHSA-2008-0364.html
CVE ID: CVE-2006-7233 State: PUBLISHED Published: 2008-08-14T22:00:00 Last Updated: 2024-08-07T20:57:40.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.6.0, and possibly other versions before 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/44459 - http://www.igniterealtime.org/issues/browse/JM-629 - http://www.igniterealtime.org/issues/browse/JM-430 - http://www.osvdb.org/47448 - http://www.s
rg/issues/browse/JM-629 - http://www.igniterealtime.org/issues/browse/JM-430 - http://www.osvdb.org/47448 - http://www.securityfocus.com/bid/30696 - http://secunia.com/advisories/31483
CVE ID: CVE-2006-7234 State: PUBLISHED Published: 2008-10-27T17:00:00 Last Updated: 2024-08-07T20:57:40.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Lynx before 2.8.6rel.4 allows local users to execute arbitrary code via malicious (1) .mailcap and (2) mime.types files in the current working directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2008/10/25/3 - http://www.securityfocus.com/bid/31917 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9719 - https://bugzilla.redhat.com/show_bug.cgi?id=214205 - http://www.redhat.com/suppor
n/oval%3Aorg.mitre.oval%3Adef%3A9719 - https://bugzilla.redhat.com/show_bug.cgi?id=214205 - http://www.redhat.com/support/errata/RHSA-2008-0965.html - http://www.securitytracker.com/id?1021107 - http://secunia.com/advisories/32407 - http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html - http://secunia.com/advisories/33568 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:217 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/46132 - http://secunia.com/advisories/32416
CVE ID: CVE-2006-7235 State: PUBLISHED Published: 2008-12-11T15:00:00 Last Updated: 2024-08-07T20:57:40.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teamtek Universal FTP Server 1.0.50 allows remote attackers to cause a denial of service (daemon crash or hang) via (1) multiple STOR (aka PUT) commands, or an MKD command followed by (2) a '*' argument, (3) a '|' argument, (4) spaces, or (5) a long string. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4520 - https://exchange.xforce.ibmcloud.com/vulne
Container: References: - http://www.vupen.com/english/advisories/2006/4520 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30297 - http://www.securityfocus.com/bid/21085 - http://secunia.com/advisories/22553
CVE ID: CVE-2006-7236 State: PUBLISHED Published: 2009-01-02T18:00:00 Last Updated: 2024-08-07T20:57:40.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/33388 - https://usn.ubuntu.com/703-1/ - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=510030 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=384593
CVE ID: CVE-2006-7237 State: PUBLISHED Published: 2009-03-31T17:00:00 Last Updated: 2024-08-07T20:57:40.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mod/nc_phpmyadmin/core/libraries/Theme_Manager.class.php in Ixprim 2.0 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/42471 - http://www.securityfocus.com/bid/19816 - http://downloads.securityfocus.com/vulnerab
bmcloud.com/vulnerabilities/42471 - http://www.securityfocus.com/bid/19816 - http://downloads.securityfocus.com/vulnerabilities/exploits/19816.html
CVE ID: CVE-2006-7238 State: PUBLISHED Published: 2009-04-21T18:07:00Z Last Updated: 2024-09-17T00:35:29.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MyShoutPro before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.zeldaforums.net/scripts/
CVE ID: CVE-2006-7239 State: PUBLISHED Published: 2010-05-24T19:00:00Z Last Updated: 2024-08-07T20:57:41.045Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _gnutls_x509_oid2mac_algorithm function in lib/gnutls_algorithms.c in GnuTLS before 1.4.2 allows remote attackers to cause a denial of service (crash) via a crafted X.509 certificate that uses a hash algorithm that is not supported by GnuTLS, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.gnu.org/software/gnutls/security.html - http://lists.gnupg.org/pipermail/gnutls-dev/2006-August/001192.html - http://lists.gnupg.org/pipermail/gnutls-dev/2006-August
//lists.gnupg.org/pipermail/gnutls-dev/2006-August/001192.html - http://lists.gnupg.org/pipermail/gnutls-dev/2006-August/001190.html
CVE ID: CVE-2006-7240 State: PUBLISHED Published: 2010-09-07T17:00:00Z Last Updated: 2024-09-16T20:01:35.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: gnome-power-manager 2.14.0 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related issue to CVE-2010-2532. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.launchpad.net/ubuntu/+source/gnome-power-manager/+bug/42052
CVE ID: CVE-2006-7241 State: PUBLISHED Published: 2010-09-20T21:00:00Z Last Updated: 2024-09-17T03:48:06.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Image Viewer component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-002 removes a user from an ACL when the user is denied all permissions for an annotation, which might allow remote authenticated users to bypass intended access restrictions in opportunistic circumstances. Additional Analyst Notes: - CVE Program Container: References: - http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm
CVE ID: CVE-2006-7242 State: PUBLISHED Published: 2010-09-20T21:00:00Z Last Updated: 2024-09-17T01:36:00.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 3.5.1 before 3.5.1-001 does not ensure that the AE Administrator role is present for Site Preferences modifications, which allows remote authenticated users to bypass intended access restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://download2.boulder.ibm.com/sar/CMA/IMA/00yrk/0/readme-ae351-021.htm
CVE ID: CVE-2006-7243 State: PUBLISHED Published: 2011-01-18T19:00:00 Last Updated: 2024-08-07T20:57:41.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP before 5.3.4 accepts the \0 character in a pathname, which might allow context-dependent attackers to bypass intended access restrictions by placing a safe file extension after this character, as demonstrated by .php\0.jpg at the end of the argument to the file_exists function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/44951 - http://svn.php.net/viewvc?view=revision&revision=305412 - http://openwall.com/lists/oss-security/2010/11/18/5 - http://marc.info/?l=bugtraq&m=1
vc?view=revision&revision=305412 - http://openwall.com/lists/oss-security/2010/11/18/5 - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://openwall.com/lists/oss-security/2010/12/09/11 - http://www.php.net/releases/5_3_4.php - http://svn.php.net/viewvc?view=revision&revision=305507 - http://www.madirish.net/?article=436 - http://secunia.com/advisories/55078 - http://openwall.com/lists/oss-security/2010/12/09/10 - http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html - http://bugs.php.net/39863 - http://www.php.net/ChangeLog-5.php - http://marc.info/?l=bugtraq&m=133469208622507&w=2 - http://openwall.com/lists/oss-security/2010/11/18/4 - http://rhn.redhat.com/errata
fo/?l=bugtraq&m=133469208622507&w=2 - http://openwall.com/lists/oss-security/2010/11/18/4 - http://rhn.redhat.com/errata/RHSA-2013-1307.html - http://www.mandriva.com/security/advisories?name=MDVSA-2010:254 - http://rhn.redhat.com/errata/RHSA-2013-1615.html - http://www.php.net/archive/2010.php#id2010-12-10-1 - http://marc.info/?l=bugtraq&m=132871655717248&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12569 - http://openwall.com/lists/oss-security/2010/12/09/9 - http://rhn.redhat.com/errata/RHSA-2014-0311.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158915.html - http://lists.fedoraproject.org/pipermail/package-annou
doraproject.org/pipermail/package-announce/2015-May/158915.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158616.html - http://marc.info/?l=bugtraq&m=132871655717248&w=2 - http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159031.html - http://support.apple.com/kb/HT4581
CVE ID: CVE-2006-7244 State: PUBLISHED Published: 2011-08-31T23:00:00Z Last Updated: 2024-09-16T22:46:05.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in pngwutil.c in libpng 1.2.13beta1, and other versions before 1.2.15beta3, allows context-dependent attackers to cause a denial of service (memory leak or segmentation fault) via a JPEG image containing an iCCP chunk with a negative embedded profile length. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2011/03/22/7 - http://www.openwall.com/lists/oss-security/2011/03/28/6 - https://bugs.gentoo.org/159216?id=159216 - http://libpng.git.sourceforge.net/gi
ll.com/lists/oss-security/2011/03/28/6 - https://bugs.gentoo.org/159216?id=159216 - http://libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng/libpng%3Ba=commitdiff%3Bh=948ee23a2a400672b1751cfc646a7467741e9b2e#patch18
CVE ID: CVE-2006-7245 State: PUBLISHED Published: 2011-05-20T22:00:00Z Last Updated: 2024-09-16T20:52:55.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Monkey's Audio before 4.01b2 allows remote attackers to cause a denial of service (application crash) via an APX file that lacks NULL termination. Additional Analyst Notes: - CVE Program Container: References: - http://www.monkeysaudio.com/versionhistory.html
CVE ID: CVE-2006-7246 State: PUBLISHED Published: 2020-01-27T14:56:49 Last Updated: 2024-08-07T20:57:41.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.gnome.org/show_bug.cgi?id=341323 - http://www.openwall.com/lists/oss-security/2010/04/22/2 - https://bugzilla.novell.com/show_bug.cgi?id=574266 - https://lwn.net/Articles/468868/