Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4217 State: PUBLISHED Published: 2006-08-17T23:00:00 Last Updated: 2024-08-07T18:57:46.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/usersonline/users.php in WEBInsta CMS 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the module_dir parameter, a different vulnerability than CVE-2006-4196. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28557 - http://secunia.com/advisories/21463
CVE ID: CVE-2006-4218 State: PUBLISHED Published: 2006-08-17T23:00:00 Last Updated: 2024-08-07T18:57:46.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3283 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28395 - http://www.securityfocus.com/bid/19543 - http://www.gulftech.org/?node=research&article_id=00109-08152006 - http://secunia.com/advisories/21484
CVE ID: CVE-2006-4219 State: PUBLISHED Published: 2006-08-18T19:00:00 Last Updated: 2024-08-07T18:57:46.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by instantiating it as an ActiveX object in Internet Explorer 6.0 SP1 on Microsoft Windows 2003 EE SP1 CN. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1403 - http://www.xsec.org/index.php?module=Releases&act=view&type=1&id=14 - http://www.securityfocus.com/archive/1/443493/100/0/threaded - http://www.securityfocus.com/bid/19
t=view&type=1&id=14 - http://www.securityfocus.com/archive/1/443493/100/0/threaded - http://www.securityfocus.com/bid/19570 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28444
CVE ID: CVE-2006-4220 State: PUBLISHED Published: 2008-02-05T11:00:00 Last Updated: 2024-08-07T18:57:46.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in webacc in Novell GroupWise WebAccess before 7 Support Pack 3 Public Beta allow remote attackers to inject arbitrary web script or HTML via the (1) User.html, (2) Error, (3) User.Theme.index, and (4) and User.lang parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/27582 - http://www.securitytracker.com/id?1019302 - http://www.osvdb.org/27531 - http://secunia.com/advisories/28778 - http://www.vupen.com/english/adviso
.com/id?1019302 - http://www.osvdb.org/27531 - http://secunia.com/advisories/28778 - http://www.vupen.com/english/advisories/2008/0395 - http://www.novell.com/documentation/gw7/readmeusgw7sp3/readmeusgw7sp3.html#b4qb42z
CVE ID: CVE-2006-4221 State: PUBLISHED Published: 2006-08-18T19:55:00 Last Updated: 2024-08-07T18:57:46.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444899/100/100/threaded - http://securitytracker.com/id?1016705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28418 - http://securityreason.com/securityalert/1424 - http://www.eeye.com/html/research/advisories/AD
m/vulnerabilities/28418 - http://securityreason.com/securityalert/1424 - http://www.eeye.com/html/research/advisories/AD20060816.html - http://www.vupen.com/english/advisories/2006/3305 - http://secunia.com/advisories/21528 - http://www.kb.cert.org/vuls/id/380277 - http://www.securityfocus.com/archive/1/443471/100/0/threaded - http://www.securityfocus.com/bid/19554
CVE ID: CVE-2006-4222 State: PUBLISHED Published: 2006-08-18T19:55:00 Last Updated: 2024-08-07T18:57:46.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.0.2.13 have unspecified vectors and impact, including (1) an "authority problem" in ThreadIdentitySupport as identified by PK25199, and "Potential security exposure" issues as identified by (2) PK22747, (3) PK24334, (4) PK25740, and (5) PK26123. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3281 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876#60213 - http://secunia.
m/english/advisories/2006/3281 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876#60213 - http://secunia.com/advisories/21487
CVE ID: CVE-2006-4223 State: PUBLISHED Published: 2006-08-18T19:55:00 Last Updated: 2024-08-07T18:57:46.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to "JSP source code exposure" (PK23475), which occurs when ibm-web-ext.xmi sets fileServingEnabled to true or ExtendedDocumentRoot is used to place a JSP outside a WAR.file; (3) the First Failure Data Capture (ffdc) log file (PK24834); and (4) traces (PK25568), a different issue than CVE-2006-4137. Additional Analyst Notes: - CVE Program Container: References: - http://www.vu
8), a different issue than CVE-2006-4137. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3281 - http://www.vupen.com/english/advisories/2007/0970 - http://secunia.com/advisories/24478 - http://www-1.ibm.com/support/docview.wss?uid=swg21243541 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876#60213 - http://secunia.com/advisories/21487 - http://www.securityfocus.com/bid/22991 - http://www-1.ibm.com/support/docview.wss?uid=swg24013827
CVE ID: CVE-2006-4224 State: PUBLISHED Published: 2006-08-18T19:55:00 Last Updated: 2024-08-07T18:57:46.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in calendar.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the year parameter. NOTE: The page parameter vector is covered by CVE-2006-4009. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/443171/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28552 - http://securityreason.com/securityalert/1413
CVE ID: CVE-2006-4225 State: REJECTED Published: 2006-08-18T19:55:00 Last Updated: 2006-08-29T09:00:00 Description: No description available.
CVE ID: CVE-2006-4226 State: PUBLISHED Published: 2006-08-18T19:55:00 Last Updated: 2024-08-07T18:57:46.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10729 - http://secunia.com/advisories/21627 - http://securitytracker.com/id?1016710 - http://www.redhat.com/support/err
A10729 - http://secunia.com/advisories/21627 - http://securitytracker.com/id?1016710 - http://www.redhat.com/support/errata/RHSA-2007-0152.html - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://secunia.com/advisories/21762 - http://www.vupen.com/english/advisories/2006/3306 - http://www.novell.com/linux/security/advisories/2006_23_sr.html - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://secunia.com/advisories/21506 - http://docs.info.apple.com/article.html?artnum=305214 - http://secunia.com/advisories/24744 - http://www.securityfocus.com/bid/19559 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28448 - http://www.mandriva.com/security/a
ityfocus.com/bid/19559 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28448 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:149 - http://secunia.com/advisories/22080 - http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html - http://bugs.mysql.com/bug.php?id=17647 - http://lists.mysql.com/commits/5927 - http://www.debian.org/security/2006/dsa-1169 - http://www.vupen.com/english/advisories/2007/0930 - http://www.redhat.com/support/errata/RHSA-2007-0083.html - http://secunia.com/advisories/24479
CVE ID: CVE-2006-4227 State: PUBLISHED Published: 2006-08-18T19:55:00 Last Updated: 2024-08-07T18:57:46.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28442 - http://www.vupen.com/english/advisories/2006/3306 - http://www.novell.com/linux/security/advisories/2006_23_sr.html -
- http://www.vupen.com/english/advisories/2006/3306 - http://www.novell.com/linux/security/advisories/2006_23_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10105 - http://www.ubuntu.com/usn/usn-338-1 - http://secunia.com/advisories/21506 - http://www.securityfocus.com/bid/19559 - http://secunia.com/advisories/22080 - http://dev.mysql.com/doc/refman/5.0/en/news-5-0-25.html - http://secunia.com/advisories/21770 - http://secunia.com/advisories/30351 - http://securitytracker.com/id?1016709 - http://www.redhat.com/support/errata/RHSA-2007-0083.html - http://www.redhat.com/support/errata/RHSA-2008-0364.html - http://bugs.mysql.com/bug.php?id=18630
/RHSA-2007-0083.html - http://www.redhat.com/support/errata/RHSA-2008-0364.html - http://bugs.mysql.com/bug.php?id=18630 - http://lists.mysql.com/commits/7918
CVE ID: CVE-2006-4228 State: PUBLISHED Published: 2006-08-18T19:55:00 Last Updated: 2024-08-07T18:57:46.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Veritas NetBackup PureDisk Remote Office Edition 6.0 before MP1 20060816 allows remote attackers to bypass authentication and gain privileges via unknown attack vectors in the management interface. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016704 - http://securityreason.com/securityalert/1412 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28415 - http://www.securityfocus.com/archive/1/443395/100/0/threaded - http://securityresponse.symantec.com/avcenter/sec
28415 - http://www.securityfocus.com/archive/1/443395/100/0/threaded - http://securityresponse.symantec.com/avcenter/security/Content/2006.08.16.html - http://secunia.com/advisories/21507 - http://seer.entsupport.symantec.com/docs/284734.htm - http://www.securityfocus.com/archive/1/443520/100/0/threaded - http://www.vupen.com/english/advisories/2006/3299 - http://www.securityfocus.com/bid/19524
CVE ID: CVE-2006-4229 State: PUBLISHED Published: 2006-08-18T19:55:00 Last Updated: 2024-08-07T18:57:46.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in archive.php in the mosListMessenger Component (com_lm) before 20060719 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://blog.phil-taylor.com/2006/08/09/information-on-moslistmessenger-security-hardening/ - http://www.securityfocus.com/archive/1/443356/100/0/threaded - http://secunia.com/advisories/21531 - http://forum.joomla.org/index.p
ecurityfocus.com/archive/1/443356/100/0/threaded - http://secunia.com/advisories/21531 - http://forum.joomla.org/index.php?topic=86460.msg439766#msg439766 - http://www.vupen.com/english/advisories/2006/3304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28405
CVE ID: CVE-2006-4230 State: PUBLISHED Published: 2006-08-18T19:55:00 Last Updated: 2024-08-07T18:57:46.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in index.php in Lizge V.20 Web Portal allow remote attackers to execute arbitrary PHP code via a URL in the (1) lizge or (2) bade parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/443309/100/0/threaded - http://securityreason.com/securityalert/1415 - http://www.securityfocus.com/bid/19533 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28389
CVE ID: CVE-2006-4231 State: PUBLISHED Published: 2006-08-18T19:55:00 Last Updated: 2024-08-07T18:57:46.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: IrfanView 3.98 (with plugins) allows remote attackers to cause a denial of service (application crash) via a crafted CUR image file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28377 - http://www.securityfocus.com/archive/1/443187/100/0/threaded - http://securityreason.com/securityalert/1414
CVE ID: CVE-2006-4232 State: PUBLISHED Published: 2006-08-18T19:55:00 Last Updated: 2024-08-07T18:57:46.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials file in between file creation and the check for exclusive file access. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28408 - http://www.globus.org/mail_archive/security-announce/2006/08/msg00000.html - http://secunia.com/advisor
bilities/28408 - http://www.globus.org/mail_archive/security-announce/2006/08/msg00000.html - http://secunia.com/advisories/21516 - http://www.securityfocus.com/bid/19549
CVE ID: CVE-2006-4233 State: PUBLISHED Published: 2006-08-18T19:55:00 Last Updated: 2024-08-07T18:57:46.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information (proxy certificates) and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created by (1) myproxy-admin-adduser, (2) grid-ca-sign, and (3) grid-security-config. Additional Analyst Notes: - CVE Program Container: References: - http://www.globus.org/mail_archive/security-announce/2006/08/msg00001.html - http://www.vupen.com/english/advisories/2006/3290 - http://s
.org/mail_archive/security-announce/2006/08/msg00001.html - http://www.vupen.com/english/advisories/2006/3290 - http://secunia.com/advisories/21516 - http://www.securityfocus.com/bid/19549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28410
CVE ID: CVE-2006-4234 State: PUBLISHED Published: 2006-08-18T19:55:00 Last Updated: 2024-08-07T19:06:06.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in classes/query.class.php in dotProject 2.0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28401 - http://www.securityfocus.com/bid/19547 - https://www.exploit-db.com/exploits/2191
CVE ID: CVE-2006-4235 State: PUBLISHED Published: 2006-08-21T18:00:00 Last Updated: 2024-08-07T19:06:06.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the import project functionality in Sony SonicStage Mastering Studio 1.1.00 through 2.2.01 allows remote attackers to execute arbitrary code via a crafted SMP file. Additional Analyst Notes: - CVE Program Container: References: - http://kb.sony-europe.com/KB/Solutions/EN/V00000_V00499/v00244.html - http://www.pentest.co.uk/documents/ptl-2006-01.html - http://www.vupen.com/english/advisories/2006/3286 - http://www.osvdb.org/27966 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28421 - http://www.securi
/2006/3286 - http://www.osvdb.org/27966 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28421 - http://www.securityfocus.com/bid/19558 - http://secunia.com/advisories/21510 - http://www.kb.cert.org/vuls/id/697761
CVE ID: CVE-2006-4236 State: PUBLISHED Published: 2006-08-21T18:00:00 Last Updated: 2024-08-07T19:06:06.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute arbitrary PHP code via a URL in the (1) shopid parameter to (a) s01.php, (b) s02.php, (c) s03.php, and (d) s04.php; and possibly a URL located after "shopid=" or "sid=" in the PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29497 - http://www.securityfocus.com/bid/19565 - http://securitytracker.com/id?1016715 - http://securityreason.com/securityalert/1417 - http://www.osvdb.org/29498
9565 - http://securitytracker.com/id?1016715 - http://securityreason.com/securityalert/1417 - http://www.osvdb.org/29498 - http://www.osvdb.org/29499 - http://www.securityfocus.com/archive/1/443469/100/0/threaded - https://www.exploit-db.com/exploits/2201 - http://www.osvdb.org/29496 - http://www.osvdb.org/29500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28425
CVE ID: CVE-2006-4237 State: PUBLISHED Published: 2006-08-21T18:00:00 Last Updated: 2024-08-07T19:06:06.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System Remote (IRSR) 0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _sysSessionPath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28427 - http://www.securityfocus.com/bid/19567
CVE ID: CVE-2006-4238 State: PUBLISHED Published: 2006-08-21T18:00:00 Last Updated: 2024-08-07T19:06:06.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in torrents.php in WebTorrent (WTcom) 0.2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter in category mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28426 - https://www.exploit-db.com/exploits/2200
CVE ID: CVE-2006-4239 State: PUBLISHED Published: 2006-08-21T18:00:00 Last Updated: 2024-08-07T19:06:07.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/urights.php in Outreach Project Tool (OPT) Max 1.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_inc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19548 - http://secunia.com/advisories/21517 - http://www.vupen.com/english/advisories/2006/3296 - https://www.exploit-db.com/exploits/2192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28402
CVE ID: CVE-2006-4240 State: PUBLISHED Published: 2006-08-21T18:00:00 Last Updated: 2024-08-07T19:06:06.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28400 - http://archives.neohapsis.com/archives/bugtraq/2006-08/0317.html - http://www.securityfocus.com/bid/19546 - http://securityreason.com/securityalert/1420 - http://www.vupen.com/english/advisories/2006/3298
CVE ID: CVE-2006-4241 State: PUBLISHED Published: 2006-08-21T18:00:00 Last Updated: 2024-08-07T19:06:07.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component (com_reporter) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1419 - http://www.securityfocus.com/archive/1/443373/100/0/threaded - http://www.securityfocus.com/bid/19553 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28412
CVE ID: CVE-2006-4242 State: PUBLISHED Published: 2006-08-21T18:00:00 Last Updated: 2024-08-07T19:06:06.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27990 - http://www.securityfocus.com/bid/19575 - http://www.vupen.com/english/advisories/2006/3313 - https://www.exploit-db.com/exploits/2203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28433 - http://www.securityfocus.com/
xploit-db.com/exploits/2203 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28433 - http://www.securityfocus.com/archive/1/443630/100/0/threaded - http://securityreason.com/securityalert/1418 - http://secunia.com/advisories/21545
CVE ID: CVE-2006-4243 State: PUBLISHED Published: 2019-11-06T02:43:37 Last Updated: 2024-08-07T19:06:06.292Z Vendors: linux-2.6 Products: linux-2.6 Problem Types: Other Description: linux vserver 2.6 before 2.6.17 suffers from privilege escalation in remount code. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2006-4243
CVE ID: CVE-2006-4244 State: PUBLISHED Published: 2006-08-31T01:00:00 Last Updated: 2024-08-07T19:06:06.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-[username] cookie matches the value of the sessionid parameter, which allows remote attackers to gain access as any logged-in user by setting the cookie and the parameter to the same value. Additional Analyst Notes: - CVE Program Container: References: - http://www.sql-ledger.org/cgi-bin/nav.pl?page=news.html&title=What%27s%20New - https://exchange.xforce.ibmcloud.com/vulnerabilities/28671 - http://www.securityfocus.com/bid/19758
le=What%27s%20New - https://exchange.xforce.ibmcloud.com/vulnerabilities/28671 - http://www.securityfocus.com/bid/19758 - http://secunia.com/advisories/21689 - http://www.securityfocus.com/archive/1/444741/100/0/threaded - http://www.securityfocus.com/archive/1/445512 - http://securityreason.com/securityalert/1472
CVE ID: CVE-2006-4245 State: PUBLISHED Published: 2019-11-06T02:54:19 Last Updated: 2024-08-07T19:06:06.599Z Vendors: archivemail Products: archivemail Problem Types: General Race Condition Description: archivemail 0.6.2 uses temporary files insecurely leading to a possible race condition. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2006-4245 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=385253