Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6629 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:33:59.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/WeBWorK/PG/Translator.pm in WeBWorK Program Generation (PG) Language before 2.3.1 uses an insufficiently restrictive regular expression to determine valid macro filenames, which allows attackers to load arbitrary macro files whose names contain the strings (1) dangerousMacros.pl, (2) PG.pl, or (3) IO.pl. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21614 - http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/PGLanguageRelease2pt3pt1 - http://www.vupen.com/english/ad
4 - http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/PGLanguageRelease2pt3pt1 - http://www.vupen.com/english/advisories/2006/5026
CVE ID: CVE-2006-6630 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:33:59.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in ListRecords.php in osprey 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the lib_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2042 - http://www.securityfocus.com/archive/1/448903/100/0/threaded
CVE ID: CVE-2006-6631 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:33:59.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/xml/oai/GetRecord.php in osprey 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lib_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2572 - http://www.securityfocus.com/bid/20552 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29586
CVE ID: CVE-2006-6632 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:33:59.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in genepi.php in Genepi 1.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the topdir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29518 - https://www.exploit-db.com/exploits/2539
CVE ID: CVE-2006-6633 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:33:59.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/yapbb_session.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[include_Bit] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29667 - https://www.exploit-db.com/exploits/2594 - http://www.securityfocus.com/bid/20615
CVE ID: CVE-2006-6634 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:33:59.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the ExtCalThai (com_extcalendar) 0.9.1 and earlier component for Mambo allow remote attackers to execute arbitrary PHP code via a URL in (1) the CONFIG_EXT[LANGUAGES_DIR] parameter to admin_events.php, (2) the mosConfig_absolute_path parameter to extcalendar.php, or (3) the CONFIG_EXT[LIB_DIR] parameter to lib/mail.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29499 - http://securityreason.com/
Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29499 - http://securityreason.com/securityalert/2041 - http://www.securityfocus.com/bid/20487 - http://archives.neohapsis.com/archives/bugtraq/2006-10/0179.html
CVE ID: CVE-2006-6635 State: PUBLISHED Published: 2006-12-18T11:00:00 Last Updated: 2024-08-07T20:34:00.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions.php in JumbaCMS 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the jcms_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29734 - https://www.exploit-db.com/exploits/2628 - http://www.securityfocus.com/bid/20693
CVE ID: CVE-2006-6636 State: PUBLISHED Published: 2006-12-19T20:00:00 Last Updated: 2024-08-07T20:33:59.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Utility Classes for IBM WebSphere Application Server (WAS) before 5.1.1.13 and 6.x before 6.0.2.17 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg27006876 - http://secunia.com/advisories/23386 - http://www-1.ibm.com/support/docview.wss?uid=swg27006879 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30903 - http://www.securityfocus.com/bid/21608 - http://www.vupen.com/english/advisorie
rce.ibmcloud.com/vulnerabilities/30903 - http://www.securityfocus.com/bid/21608 - http://www.vupen.com/english/advisories/2006/5017 - http://www.securityfocus.com/bid/21636 - http://www-1.ibm.com/support/docview.wss?uid=swg1PK29725 - http://secunia.com/advisories/23414 - http://www.vupen.com/english/advisories/2006/5050
CVE ID: CVE-2006-6637 State: PUBLISHED Published: 2006-12-19T20:00:00 Last Updated: 2024-08-07T20:33:59.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Servlet Engine and Web Container in IBM WebSphere Application Server (WAS) before 6.0.2.17, when ibm-web-ext.xmi sets fileServingEnabled to true and servlet caching is enabled, allows remote attackers to obtain JSP source code and other sensitive information via "specific requests." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0970 - http://secunia.com/advisories/24478 - http://www-1.ibm.com/support/docview.wss?uid=swg21243541 - http://www-1.ibm.com/support/d
secunia.com/advisories/24478 - http://www-1.ibm.com/support/docview.wss?uid=swg21243541 - http://www-1.ibm.com/support/docview.wss?uid=swg27006876 - http://www.securityfocus.com/bid/21636 - http://www.securityfocus.com/bid/22991 - http://www-1.ibm.com/support/docview.wss?uid=swg24015155 - http://secunia.com/advisories/23414 - http://www.vupen.com/english/advisories/2006/5050
CVE ID: CVE-2006-6638 State: PUBLISHED Published: 2006-12-19T20:00:00Z Last Updated: 2024-09-16T22:51:17.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM DB2 8.1 before FixPak 14 allows remote attackers to cause a denial of service via a crafted SQLJRA packet, which causes a NULL pointer dereference in the sqle_db2ra_as_recvrequest function in DB2ENGN.DLL, a different issue than CVE-2006-4257. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg1IY91847 - http://www.appsecinc.com/resources/alerts/db2/2006-11-30.shtml - http://secunia.com/advisories/23397 - http://www.securityfocus.com/bid/21646
CVE ID: CVE-2006-6639 State: PUBLISHED Published: 2006-12-19T20:00:00Z Last Updated: 2024-09-17T00:15:53.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in chetcpasswd 2.4.1 allow local users to gain privileges via unspecified vectors related to executing (1) the cp program, (2) the mail program, or (3) the program specified in the post_change configuration line. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23024 - http://www.securityfocus.com/bid/21644
CVE ID: CVE-2006-6640 State: PUBLISHED Published: 2006-12-19T20:00:00 Last Updated: 2024-08-07T20:33:59.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Omniture SiteCatalyst allow remote attackers to inject arbitrary web script or HTML via the (1) ss parameter in (a) search.asp and the (2) company and (3) username fields on (b) the web login page. NOTE: some details were obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21620 - http://www.securityfocus.com/archive/1/454597/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabil
d/21620 - http://www.securityfocus.com/archive/1/454597/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30916 - http://www.hackerscenter.com/archive/view.asp?id=26714 - http://securityreason.com/securityalert/2048 - http://securitytracker.com/id?1017392 - http://www.securityfocus.com/archive/1/458130/100/100/threaded
CVE ID: CVE-2006-6641 State: PUBLISHED Published: 2006-12-20T00:00:00 Last Updated: 2024-08-07T20:33:59.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including BrightStor Portal r11.1, CleverPath Aion BPM r10 through r10.2, eTrust Security Command Center r1 and r8, and Unicenter, does not properly handle when multiple Portal servers are started at the same time and share the same data store, which might cause a Portal user to inherit the session and credentials of a user who is on another Portal server. Additional Analyst Notes: - CVE Program Contai
it the session and credentials of a user who is on another Portal server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21681 - http://www.vupen.com/english/advisories/2006/5091 - http://supportconnectw.ca.com/public/ca_common_docs/cpportal_secnot.asp - http://www.securityfocus.com/archive/1/455041/100/0/threaded - http://www.osvdb.org/30854 - http://securitytracker.com/id?1017429 - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34876 - http://secunia.com/advisories/23426
CVE ID: CVE-2006-6642 State: PUBLISHED Published: 2006-12-20T02:00:00 Last Updated: 2024-08-07T20:33:59.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in haber.asp in Contra Haber Sistemi 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21626 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30917 - http://securityreason.com/securityalert/2050 - http://www.securityfocus.com/archive/1/454594/100/0/threaded - http://www.vupen.com/english/advisories/2006/5036
CVE ID: CVE-2006-6643 State: PUBLISHED Published: 2006-12-20T02:00:00 Last Updated: 2024-08-07T20:33:59.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fightersoft Multimedia Star FTP server 1.10 allows remote attackers to cause a denial of service (crash) via multiple RETR commands with long arguments. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30922 - https://www.exploit-db.com/exploits/2942 - http://secunia.com/advisories/23320 - http://www.vupen.com/english/advisories/2006/5042 - http://www.securityfocus.com/bid/21630
CVE ID: CVE-2006-6644 State: PUBLISHED Published: 2006-12-20T02:00:00 Last Updated: 2024-08-07T20:34:00.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in pages/meeting_constants.php in the Meeting (mx_meeting) 1.1.2 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21624 - http://www.vupen.com/english/advisories/2006/5032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30913 - http://secunia.com/advisories/23394 - https://www.exploit-db.com/exploits/2941
CVE ID: CVE-2006-6645 State: PUBLISHED Published: 2006-12-20T02:00:00 Last Updated: 2024-08-07T20:33:59.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in language/lang_english/lang_admin.php in the Web Links (mx_links) 2.05 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21622 - http://www.vupen.com/english/advisories/2006/5034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30915 - https://www.exploit-db.com/exploits/2939
CVE ID: CVE-2006-6646 State: PUBLISHED Published: 2006-12-20T02:00:00 Last Updated: 2024-08-07T20:33:59.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Drupal (1) Project Issue Tracking 4.7.x-1.0 and 4.7.x-2.0, and (2) Project 4.6.x-1.0, 4.7.x-1.0, and 4.7.x-2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, which do not use the check_plain function. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/103943 - http://www.securityfocus.com/bid/21643 - http://www.vupen.com/english/advisories/2006/5048 - http://secunia.com/advisories/23410
CVE ID: CVE-2006-6647 State: PUBLISHED Published: 2006-12-20T02:00:00 Last Updated: 2024-08-07T20:33:59.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the MySite 4.7.x before 4.7.x-3.3 and 5.x before 5.x-1.3 module for Drupal allows remote attackers to inject arbitrary web script or HTML via the Title field when editing a page. NOTE: some details were obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/103958 - http://secunia.com/advisories/23405 - http://www.vupen.com/english/advisories/2006/5049
CVE ID: CVE-2006-6648 State: PUBLISHED Published: 2006-12-20T02:00:00 Last Updated: 2024-08-07T20:33:59.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in main.inc.php in planetluc.com RateMe 1.3.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtoscript parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017431 - http://www.securityfocus.com/bid/21642 - http://www.vupen.com/english/advisories/2006/5058 - http://www.securityfocus.com/archive/1/454708/100/0/threaded - http://securityreason.com/securityalert/2049
CVE ID: CVE-2006-6649 State: PUBLISHED Published: 2006-12-20T02:00:00 Last Updated: 2024-08-07T20:34:00.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in display.php in HyperVM 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an encoded frm_action parameter. NOTE: the vendor disputes this issue, but it is not certain whether the dispute is about the severity of the issue, or its existence. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454704/100/0/threaded - http://www.vupen.com/english/advisories/2006/5062 - http://secunia.com/advisories/23413
rchive/1/454704/100/0/threaded - http://www.vupen.com/english/advisories/2006/5062 - http://secunia.com/advisories/23413 - http://www.aria-security.com/forum/showthread.php?p=89#post89 - http://securityreason.com/securityalert/2051 - http://www.attrition.org/pipermail/vim/2006-December/001191.html
CVE ID: CVE-2006-6650 State: PUBLISHED Published: 2006-12-20T02:00:00 Last Updated: 2024-08-07T20:33:59.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in charts_constants.php in the Charts (mx_charts) 1.0.0 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21623 - https://www.exploit-db.com/exploits/2940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30914 - http://secunia.com/advisories/23369 - http://www.vupen.com/english/advisories/2006/5033
CVE ID: CVE-2006-6651 State: PUBLISHED Published: 2006-12-20T02:00:00 Last Updated: 2024-08-07T20:33:59.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in W29N51.SYS in the Intel 2200BG wireless driver 9.0.3.9 allows remote attackers to cause memory corruption and execute arbitrary code via a series of crafted beacon frames. NOTE: some details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21641 - http://www.vupen.com/english/advisories/2006/5065 - http://secunia.com/advisories/23338 - http://downloads.securityfocus.com/vulnerabilities/exploits/21641.c
CVE ID: CVE-2006-6652 State: PUBLISHED Published: 2006-12-20T02:00:00 Last Updated: 2024-08-07T20:33:59.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the glob implementation (glob.c) in libc in NetBSD-current before 20050914, NetBSD 2.* and 3.* before 20061203, and Apple Mac OS X before 2007-004, as used by the FTP daemon and tnftpd, allows remote authenticated users to execute arbitrary code via a long pathname that results from path expansion. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24966 - http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-027.txt.asc - http://securitytracker.com/id
s/24966 - http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-027.txt.asc - http://securitytracker.com/id?1017386 - http://docs.info.apple.com/article.html?artnum=305391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30670 - http://www.osvdb.org/31781 - http://www.us-cert.gov/cas/techalerts/TA07-109A.html - http://secunia.com/advisories/23178 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051009.html - http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html - http://www.securityfocus.com/bid/21377 - http://www.vupen.com/english/advisories/2007/1470
CVE ID: CVE-2006-6653 State: PUBLISHED Published: 2006-12-20T02:00:00Z Last Updated: 2024-09-17T01:31:30.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: The accept function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service (socket consumption) via an invalid (1) name or (2) namelen parameter, which may result in the socket never being closed (aka "a dangling socket"). Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017293 - ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-026.txt.asc
CVE ID: CVE-2006-6654 State: PUBLISHED Published: 2006-12-20T02:00:00Z Last Updated: 2024-09-17T02:31:14.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sendmsg function in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029, when run on a 64-bit architecture, allows attackers to cause a denial of service (kernel panic) via an invalid msg_controllen parameter to the sendit function. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017293 - ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-026.txt.asc
CVE ID: CVE-2006-6655 State: PUBLISHED Published: 2006-12-20T02:00:00Z Last Updated: 2024-09-16T18:43:40.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: The procfs implementation in NetBSD-current before 20061023, NetBSD 3.0 and 3.0.1 before 20061024, and NetBSD 2.x before 20061029 allows local users to cause a denial of service (kernel panic) by attempting to access /emul/linux/proc/0/stat on a procfs filesystem that was mounted with mount_procfs -o linux, which results in a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017293 - ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-026.tx
nces: - http://securitytracker.com/id?1017293 - ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-026.txt.asc
CVE ID: CVE-2006-6656 State: PUBLISHED Published: 2006-12-20T02:00:00Z Last Updated: 2024-09-17T03:43:24.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ptrace in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before 20061027, and NetBSD 2.x before 20061119 allows local users to read kernel memory and obtain sensitive information via certain manipulations of a PT_LWPINFO request, which leads to a memory leak and information leak. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-025.txt.asc - http://securitytracker.com/id?1017292
CVE ID: CVE-2006-6657 State: PUBLISHED Published: 2006-12-20T02:00:00Z Last Updated: 2024-09-16T18:24:43.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: The if_clone_list function in NetBSD-current before 20061027, NetBSD 3.0 and 3.0.1 before 20061027, and NetBSD 2.x before 20061119 allows local users to read potentially sensitive, uninitialized stack memory via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-025.txt.asc - http://securitytracker.com/id?1017292
CVE ID: CVE-2006-6658 State: PUBLISHED Published: 2006-12-20T02:00:00Z Last Updated: 2024-09-16T19:05:27.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Inktomi Search 4.1.4 allows remote attackers to obtain sensitive information via direct requests with missing parameters to (1) help/header.html, (2) thesaurus.html, and (3) topics.html, which leak the installation path in the resulting error message, a related issue to CVE-2006-5970. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017242
CVE ID: CVE-2006-6659 State: PUBLISHED Published: 2006-12-20T02:00:00Z Last Updated: 2024-09-16T18:59:10.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2 allows remote attackers to cause a denial of service (Internet Explorer 7 hang) via crafted HTML. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21649 - http://shinnai.altervista.org/viewtopic.php?id=41&t_id=8 - http://securitytracker.com/id?1017397
CVE ID: CVE-2006-6660 State: PUBLISHED Published: 2006-12-20T23:00:00 Last Updated: 2024-08-07T20:33:59.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: The nodeType function in KDE libkhtml 4.2.0 and earlier, as used by Konquerer, KMail, and other programs, allows remote attackers to cause a denial of service (crash) via malformed HTML tags, possibly involving a COL SPAN tag embedded in a RANGE tag. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/21662.html - http://www.securityfocus.com/bid/21662 - http://www.vupen.com/english/advisories/2006/5071
CVE ID: CVE-2006-6661 State: PUBLISHED Published: 2006-12-20T23:00:00 Last Updated: 2024-08-07T20:33:59.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Variable overwrite vulnerability in blog.php in PHP-Update 2.7 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code via multiple vectors that use the extract function, as demonstrated by the (1) f, (2) newmessage, (3) newusername, (4) adminuser, and (5) permission parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2953 - http://secunia.com/advisories/23407 - http://www.vupen.com/english/advisories/2006/5088