deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-0504
Published: 2006-02-01
Description: Unspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to cause a denial of service (CPU utilization) by viewing "formatted quoted-printable emails" via webmail.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18716; http://www.mailenable.com/enterprisehistory.asp; https://exchange.xforce.ibmcloud.com/vulnerabilities/24517
CVE: CVE-2006-0505
Published: 2006-02-01
Description: zbattle.net Zbattle client 1.09 SR-1 beta allows remote attackers to cause an unspecified denial of service by rapidly creating and closing a game.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/423431/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/24369; http://www.securityfocus.com/archive/1/423431/100/0/threaded
CVE: CVE-2006-0506
Published: 2006-02-01
Description: Cross-site scripting (XSS) vulnerability in index.php in Nuked-klaN 1.7 allows remote attackers to inject arbitrary web script or HTML via the letter parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/18670; http://securityreason.com/securityalert/385; http://www.osvdb.org/22805
CVE: CVE-2006-0507
Published: 2006-02-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script or HTML via (1) unknown attack vectors in the administrative interface and (2) input fields of the contact form.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/18673; http://www.securityfocus.com/archive/1/423442/100/0/threaded; http://www.securityfocus.com/archive/1/423563/100/0/threaded
CVE: CVE-2006-0508
Published: 2006-02-01
Description: Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled, which allows remote attackers to list and possibly read images that are stored in that directory.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18673; http://www.securityfocus.com/archive/1/423442/100/0/threaded; http://www.securityfocus.com/archive/1/424431/100/0/threaded
CVE: CVE-2006-0509
Published: 2006-02-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via (1) the contact_search parameter and (2) unspecified url fields.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/18657; http://securityreason.com/securityalert/391; http://www.osvdb.org/22843
CVE: CVE-2006-0510
Published: 2006-02-01
Description: SQL injection vulnerability in userlogin.jsp in Daffodil CRM 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified parameters in a login action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/18685; http://www.osvdb.org/22879; http://www.securityfocus.com/archive/1/423718/100/0/threaded
CVE: CVE-2006-0511
Published: 2006-02-01
Description: Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allows subsequent users to log in as the previous user and gain privileges.  NOTE: the vendor has disputed this issue, saying that "This is a customer specific issue related to their Kerberos authentication single sign-on application and not a vulnerability in the Blackboard product.
CVSS Score: 4.3 (MEDIUM)
References: http://www.osvdb.org/28023; http://www.securityfocus.com/archive/1/423654/100/0/threaded; http://www.securityfocus.com/archive/1/423686/100/0/threaded
CVE: CVE-2006-0433
Published: 2006-02-02
Description: Selective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote attackers to cause a denial of service (infinite loop).
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:08.sack.asc; http://secunia.com/advisories/18696; http://securityreason.com/securityalert/399
CVE: CVE-2006-0512
Published: 2006-02-02
Description: PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the temporary files, which are not properly created by (1) migrate_all_online.sh, (2) migrate_all_offline.sh, (3) migrate_all_netinfo_online.sh, (4) migrate_all_netinfo_offline.sh, (5) migrate_all_nis_online.sh, (6) migrate_all_nis_offline.sh, (7) migrate_all_nisplus_online.sh, and (8) migrate_all_nisplus_offline.sh.
CVSS Score: 2.1 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=338920; http://secunia.com/advisories/22243; http://www.vupen.com/english/advisories/2005/2427
CVE: CVE-2006-0516
Published: 2006-02-02
Description: Unspecified vulnerability in the kernel processing in Solaris 10 64 bit platform, when running in 64-bit mode, allows local users to cause a denial of service (system panic) via unknown attack vectors.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/18671; http://securitytracker.com/id?1015557; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102149-1
CVE: CVE-2006-0517
Published: 2006-02-02
Description: Multiple SQL injection vulnerabilities in formulaires/inc-formulaire_forum.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id_forum, (2) id_article, or (3) id_breve parameters to forum.php3; (4) unspecified vectors related to "session handling"; and (5) when posting "petitions".
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0990.html; http://secunia.com/advisories/18676; http://securityreason.com/securityalert/395
CVE: CVE-2006-0518
Published: 2006-02-02
Description: Cross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/18676; http://www.osvdb.org/22849; http://www.securityfocus.com/bid/16461
CVE: CVE-2006-0519
Published: 2006-02-02
Description: SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain sensitive information via a direct request to inc-messforum.php3, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18676; http://www.vupen.com/english/advisories/2006/0398; http://www.zone-h.org/en/advisories/read/id=8650/
CVE: CVE-2006-0520
Published: 2006-02-02
Description: SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board (IPB) allows remote attackers to execute arbitrary SQL commands via the site parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18664; http://www.osvdb.org/22851; http://www.securityfocus.com/bid/16447
CVE: CVE-2006-0521
Published: 2006-02-02
Description: Cross-site scripting (XSS) vulnerability in results.php in BrowserCRM allows remote attackers to inject arbitrary web script or HTML via certain manipulations of the query parameter, as demonstrated using an IMG SRC tag.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/18658; http://securityreason.com/securityalert/393; http://www.osvdb.org/22841
CVE: CVE-2006-0522
Published: 2006-02-02
Description: SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18689; http://securityresponse.symantec.com/avcenter/security/Content/2006.02.01.html; http://securitytracker.com/id?1015561
CVE: CVE-2006-0523
Published: 2006-02-02
Description: SQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute arbitrary SQL commands via the templatelist variable.
CVSS Score: 7.5 (HIGH)
References: http://community.mybboard.net/showthread.php?tid=6418; http://secunia.com/advisories/18678; http://www.osvdb.org/22903
CVE: CVE-2006-0524
Published: 2006-02-02
Description: Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0955.html; http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0969.html; http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0979.html
CVE: CVE-2006-0525
Published: 2006-02-02
Description: Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/18698; http://securitytracker.com/id?1015577; http://securitytracker.com/id?1015578
CVE: CVE-2006-0526
Published: 2006-02-02
Description: The default configuration of the America Online (AOL) client software allows all users to modify a certain registry value that specifies a DLL file name, which might allow local users to gain privileges via a Trojan horse program.
CVSS Score: 7.2 (HIGH)
References: http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf; http://www.kb.cert.org/vuls/id/953860; http://www.securityfocus.com/archive/1/423587/100/0/threaded
CVE: CVE-2006-0527
Published: 2006-02-02
Description: BIND 4 (BIND4) and BIND 8 (BIND8), if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style DNS cache corruption" attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://attrition.org/pipermail/vim/2006-February/000551.html; http://computerworld.com/networkingtopics/networking/story/0%2C10801%2C103744%2C00.html; http://secunia.com/advisories/18690
CVE: CVE-2006-0528
Published: 2006-02-02
Description: The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0925.html; http://secunia.com/advisories/19504; http://securityreason.com/securityalert/610
CVE: CVE-2006-0292
Published: 2006-02-02
Description: The Javascript interpreter (jsinterp.c) in Mozilla and Firefox before 1.5.1 does not properly dereference objects, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via unknown attack vectors related to garbage collection.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt; ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U; http://secunia.com/advisories/18700
CVE: CVE-2006-0293
Published: 2006-02-02
Description: The function allocation code (js_NewFunction in jsfun.c) in Firefox 1.5 allows attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via user-defined methods that trigger garbage collection in a way that operates on freed objects.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18700; http://secunia.com/advisories/18704; http://secunia.com/advisories/19862
CVE: CVE-2006-0294
Published: 2006-02-02
Description: Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 allow remote attackers to execute arbitrary code by changing an element's style from position:relative to position:static, which causes Gecko to operate on freed memory.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18700; http://secunia.com/advisories/18704; http://secunia.com/advisories/22065
CVE: CVE-2006-0295
Published: 2006-02-02
Description: Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the QueryInterface method of the built-in Location and Navigator objects, which leads to memory corruption.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/18700; http://secunia.com/advisories/18704; http://secunia.com/advisories/22065
CVE: CVE-2006-0296
Published: 2006-02-02
Description: The XULDocument.persist function in Mozilla, Firefox before 1.5.0.1, and SeaMonkey before 1.0 does not validate the attribute name, which allows remote attackers to execute arbitrary Javascript by injecting RDF data into the user's localstore.rdf file.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt; ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U; http://secunia.com/advisories/18700
CVE: CVE-2006-0529
Published: 2006-02-02
Description: Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multiple CA products, allows remote attackers to cause a denial of service via a crafted message to TCP port 4105.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18681; http://securitytracker.com/id?1015571; http://supportconnectw.ca.com/public/ca_common_docs/camessagsecurity_notice.asp
CVE: CVE-2006-0530
Published: 2006-02-02
Description: Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multiple CA products, allows remote attackers to cause a denial of service via spoofed CAM control messages.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18681; http://securityreason.com/securityalert/404; http://securitytracker.com/id?1015571
CVE: CVE-2006-0297
Published: 2006-02-02
Description: Multiple integer overflows in Mozilla Firefox 1.5, Thunderbird 1.5 if Javascript is enabled in mail, and SeaMonkey before 1.0 might allow remote attackers to execute arbitrary code via the (1) EscapeAttributeValue in jsxml.c for E4X, (2) nsSVGCairoSurface::Init in SVG, and (3) nsCanvasRenderingContext2D.cpp in Canvas.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/18700; http://secunia.com/advisories/18704; http://secunia.com/advisories/22065
CVE: CVE-2006-0298
Published: 2006-02-02
Description: The XML parser in Mozilla Firefox before 1.5.0.1 and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and possibly read sensitive data via unknown attack vectors that trigger an out-of-bounds read.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/18700; http://secunia.com/advisories/18704; http://secunia.com/advisories/22065
CVE: CVE-2006-0299
Published: 2006-02-02
Description: The E4X implementation in Mozilla Firefox before 1.5.0.1, Thunderbird 1.5 if running Javascript in mail, and SeaMonkey before 1.0 exposes the internal "AnyName" object to external interfaces, which allows multiple cooperating domains to exchange information in violation of the same origin restrictions.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/18700; http://secunia.com/advisories/18704; http://secunia.com/advisories/22065
CVE: CVE-2006-0531
Published: 2006-02-04
Description: Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authentication and gain top-level administrator privileges via the amadmin CLI tool.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/18699; http://securitytracker.com/id?1015567; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102140-1
CVE: CVE-2006-0532
Published: 2006-02-04
Description: Cross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML via a strSok parameter containing a javascript: URI in an IMG SRC attribute.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/18683; http://securityreason.com/securityalert/400; http://www.osvdb.org/22911
CVE: CVE-2006-0533
Published: 2006-02-04
Description: Cross-site scripting (XSS) vulnerability in webmailaging.cgi in cPanel allows remote attackers to inject arbitrary web script or HTML via the numdays parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]2271&w=2; http://secunia.com/advisories/18691; http://www.osvdb.org/22906
CVE: CVE-2006-0534
Published: 2006-02-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attackers to inject arbitrary web script or HTML via the (1) ortak or (2) kat parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/18730; http://securityreason.com/securityalert/401; http://www.securityfocus.com/archive/1/423787/100/0/threaded
CVE: CVE-2006-0535
Published: 2006-02-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in Community Server allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.  NOTE: this candidate does not contain any actionable or distinguishing information.  Perhaps it should not be included in CVE.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/16478; http://www.securityfocus.com/bid/16478
CVE: CVE-2006-0536
Published: 2006-02-04
Description: Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.  NOTE: some sources say that the affected parameter is "date," but the demonstration URL shows that it is "sort".
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1015581; http://www.osvdb.org/22978; http://www.securityfocus.com/archive/1/423901/100/0/threaded
CVE: CVE-2006-0537
Published: 2006-02-04
Description: Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows remote attackers to execute arbitrary code via a long RCPT TO argument.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2006-02/0040.html; http://downloads.securityfocus.com/vulnerabilities/exploits/exchangepop3.pl; http://secunia.com/advisories/18687
CVE: CVE-2006-0538
Published: 2006-02-04
Description: CipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote attackers to cause a denial of service (possibly CPU consumption) via a SYN flood with malformed TCP packets from multiple connections.
CVSS Score: 2.6 (LOW)
References: http://securityreason.com/securityalert/407; http://securitytracker.com/id?1015555; http://www.securityfocus.com/archive/1/423898/100/0/threaded
CVE: CVE-2006-0539
Published: 2006-02-04
Description: The convert-fcrontab program in fcron 3.0.0 might allow local users to gain privileges via a long command-line argument, which causes Linux glibc to report heap memory corruption, possibly because a strcpy in the strdup2 function can "overwrite some data."
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0999.html; http://fcron.free.fr/doc/en/changes.html; http://fcron.free.fr/news.php#a20060206a.xml
CVE: CVE-2006-0540
Published: 2006-02-04
Description: Multiple SQL injection vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://www.evuln.com/vulns/54/summary.html; http://www.securityfocus.com/archive/1/423957/100/0/threaded; http://www.securityfocus.com/bid/16464
CVE: CVE-2006-0541
Published: 2006-02-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "posting new messages."
CVSS Score: 4.3 (MEDIUM)
References: http://www.evuln.com/vulns/54/summary.html; http://www.securityfocus.com/archive/1/423957/100/0/threaded; http://www.securityfocus.com/archive/1/426200/100/0/threaded
CVE: CVE-2006-0542
Published: 2006-02-04
Description: Multiple SQL injection vulnerabilities in config.php in NukedWeb GuestBookHost 2005.04.25 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameters.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18761; http://www.evuln.com/vulns/56/summary.html; http://www.securityfocus.com/archive/1/424714/100/0/threaded
CVE: CVE-2006-0543
Published: 2006-02-04
Description: Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service (client crash) via an AIM message containing the Mac encoded Rich Text Format (RTF) escape sequences (1) \'d1, (2) \'d2, (3) \'d3, (4) \'d4, and (5) \'d5.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.0 (MEDIUM)
References: http://www.osvdb.org/22877; http://www.osvdb.org/22877
CVE: CVE-2006-0544
Published: 2006-02-04
Description: urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to "file://" followed by a large number of "-" (dash of hyphen) characters.
CVSS Score: 7.5 (HIGH)
References: http://www.security-protocols.com/advisory/sp-x23-advisory.txt; http://www.securityfocus.com/bid/16463; http://www.security-protocols.com/advisory/sp-x23-advisory.txt
CVE: CVE-2006-0545
Published: 2006-02-04
Description: SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Number parameter.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2006-03/0494.html; http://securitytracker.com/id?1015549; http://www.cyberlords.net/advisories/cl_ubb.txt
CVE: CVE-2006-0546
Published: 2006-02-04
Description: Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.com allows remote attackers to execute arbitrary code via "evilcode" in the key parameter, possibly a PHP remote file include vulnerability in which the attack vector is a URL in the key parameter.  NOTE: it is not clear whether this vulnerability is associated with an online service or application service provider.  If so, then it should not be included in CVE.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/423365/100/0/threaded; http://www.securityfocus.com/archive/1/423365/100/0/threaded