deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-2579
Published: 2006-05-24
Description: Unspecified vulnerability in HP OpenView Storage Data Protector 5.1 and 5.5 allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00671912; http://secunia.com/advisories/20196; http://securityreason.com/securityalert/965
CVE: CVE-2006-2580
Published: 2006-05-24
Description: Multiple unspecified vulnerabilities in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50 allow remote attackers to gain privileged access, execute arbitrary commands, or create arbitrary files via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00672314; http://secunia.com/advisories/20193; http://securityreason.com/securityalert/966
CVE: CVE-2006-2444
Published: 2006-05-25
Description: The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees of previously-freed memory (double-free) by snmp_trap_decode as well as its calling function, as demonstrated via certain test cases of the PROTOS SNMP test suite.
CVSS Score: 7.8 (HIGH)
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.18; http://secunia.com/advisories/20182; http://secunia.com/advisories/20225
CVE: CVE-2006-2581
Published: 2006-05-25
Description: Cross-site scripting (XSS) vulnerability in Wiki content in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/20264; http://www.vupen.com/english/advisories/2006/1949; https://exchange.xforce.ibmcloud.com/vulnerabilities/26664
CVE: CVE-2006-2582
Published: 2006-05-25
Description: The editing form in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to execute arbitrary Ruby code via unknown attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20264; http://www.vupen.com/english/advisories/2006/1949; https://exchange.xforce.ibmcloud.com/vulnerabilities/26668
CVE: CVE-2006-2583
Published: 2006-05-25
Description: PHP remote file inclusion vulnerability in nucleus/libs/PLUGINADMIN.php in Nucleus 3.22 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[DIR_LIBS] parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://forum.nucleuscms.org/viewtopic.php?t=12304; http://retrogod.altervista.org/nucleus_322_incl_xpl.html; http://secunia.com/advisories/20219
CVE: CVE-2006-2584
Published: 2006-05-25
Description: Multiple cross-site scripting (XSS) vulnerabilities in post.php in SkyeBox 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) message parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information, although it was likely prompted by a vague announcement from a researcher who incorrectly referred to the product as "SkyeShoutbox."
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/20234; http://securityreason.com/securityalert/950; http://www.securityfocus.com/archive/1/434826/100/0/threaded
CVE: CVE-2006-2585
Published: 2006-05-25
Description: SQL injection vulnerability in Destiney Links Script 2.1.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/20248; http://www.vupen.com/english/advisories/2006/1933; https://exchange.xforce.ibmcloud.com/vulnerabilities/28514
CVE: CVE-2006-2586
Published: 2006-05-25
Description: Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the HTTP_REFERER header in an HTTP request.
CVSS Score: 5.8 (MEDIUM)
References: http://www.vupen.com/english/advisories/2006/1937; https://exchange.xforce.ibmcloud.com/vulnerabilities/26643; http://www.vupen.com/english/advisories/2006/1937
CVE: CVE-2006-2587
Published: 2006-05-25
Description: Buffer overflow in the WebTool HTTP server component in (1) PunkBuster before 1.229, as used by multiple products including (2) America's Army 1.228 and earlier, (3) Battlefield 1942 1.158 and earlier, (4) Battlefield 2 1.184 and earlier, (5) Battlefield Vietnam 1.150 and earlier, (6) Call of Duty 1.173 and earlier, (7) Call of Duty 2 1.108 and earlier, (8) DOOM 3 1.159 and earlier, (9) Enemy Territory 1.167 and earlier, (10) Far Cry 1.150 and earlier, (11) F.E.A.R. 1.093 and earlier, (12) Joint Operations 1.187 and earlier, (13) Quake III Arena 1.150 and earlier, (14) Quake 4 1.181 and earlier, (15) Rainbow Six 3: Raven Shield 1.169 and earlier, (16) Rainbow Six 4: Lockdown 1.093 and earlier, (17) Return to Castle Wolfenstein 1.175 and earlier, and (18) Soldier of Fortune II 1.183 and earlier allows remote attackers to cause a denial of service (application crash) via a long webkey parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/pbwebbof-adv.txt; http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0607.html; http://secunia.com/advisories/20257
CVE: CVE-2006-2588
Published: 2006-05-25
Description: Russcom PHPImages allows remote attackers to upload files of arbitrary types by uploading a file with a .gif extension.  NOTE: due to lack of specific information about attack vectors do not depend on the existence of another vulnerability, it is not clear whether this is a vulnerability.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/953; http://www.securityfocus.com/archive/1/434824/100/0/threaded; http://www.securityfocus.com/bid/18089
CVE: CVE-2006-2589
Published: 2006-05-25
Description: SQL injection vulnerability in rss.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter.  NOTE: it is not clear from the original report how this attack can succeed, since the demonstration URL uses a variable that is overwritten with static data in the extracted source code.
CVSS Score: 6.4 (MEDIUM)
References: http://securityreason.com/securityalert/952; http://www.securityfocus.com/archive/1/434728/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/28520
CVE: CVE-2006-2590
Published: 2006-05-25
Description: SQL injection vulnerability in e107 before 0.7.5 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
CVSS Score: 6.4 (MEDIUM)
References: http://e107.org/comment.php?comment.news.788; http://secunia.com/advisories/20262; http://www.osvdb.org/25739
CVE: CVE-2006-2591
Published: 2006-05-25
Description: Unspecified vulnerability in e107 before 0.7.5 has unknown impact and remote attack vectors related to an "emailing exploit".
CVSS Score: 5.0 (MEDIUM)
References: http://e107.org/comment.php?comment.news.788; http://secunia.com/advisories/20262; http://www.osvdb.org/25740
CVE: CVE-2006-2592
Published: 2006-05-25
Description: Unspecified vulnerability in DSChat 1.0 allows remote attackers to execute arbitrary PHP code via the Nickname field, which is not sanitized before creating a file in a user directory.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20258; http://www.osvdb.org/25735; http://www.vupen.com/english/advisories/2006/1961
CVE: CVE-2006-2593
Published: 2006-05-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2581.  Reason: This candidate is a duplicate of CVE-2006-2581.  Notes: All CVE users should reference CVE-2006-2581 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-2594
Published: 2006-05-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2582.  Reason: This candidate is a duplicate of CVE-2006-2582.  Notes: All CVE users should reference CVE-2006-2582 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-2595
Published: 2006-05-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2583.  Reason: This candidate is a duplicate of CVE-2006-2583.  Notes: All CVE users should reference CVE-2006-2583 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-2596
Published: 2006-05-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2584.  Reason: This candidate is a duplicate of CVE-2006-2584.  Notes: All CVE users should reference CVE-2006-2584 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-2597
Published: 2006-05-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2585.  Reason: This candidate is a duplicate of CVE-2006-2585.  Notes: All CVE users should reference CVE-2006-2585 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-2598
Published: 2006-05-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2586.  Reason: This candidate is a duplicate of CVE-2006-2586.  Notes: All CVE users should reference CVE-2006-2586 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-2599
Published: 2006-05-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2587.  Reason: This candidate is a duplicate of CVE-2006-2587.  Notes: All CVE users should reference CVE-2006-2587 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-2600
Published: 2006-05-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2588.  Reason: This candidate is a duplicate of CVE-2006-2588.  Notes: All CVE users should reference CVE-2006-2588 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-2601
Published: 2006-05-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2589.  Reason: This candidate is a duplicate of CVE-2006-2589.  Notes: All CVE users should reference CVE-2006-2589 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-2602
Published: 2006-05-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2590.  Reason: This candidate is a duplicate of CVE-2006-2590.  Notes: All CVE users should reference CVE-2006-2590 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-2603
Published: 2006-05-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2591.  Reason: This candidate is a duplicate of CVE-2006-2591.  Notes: All CVE users should reference CVE-2006-2591 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-2604
Published: 2006-05-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2592.  Reason: This candidate is a duplicate of CVE-2006-2592.  Notes: All CVE users should reference CVE-2006-2592 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-2605
Published: 2006-05-25
Description: Cross-site scripting (XSS) vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatbox, probably involving the ctext parameter to send.php.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/20258; http://securityreason.com/securityalert/958; http://securitytracker.com/id?1016148
CVE: CVE-2006-2606
Published: 2006-05-25
Description: Cross-site scripting (XSS) vulnerability in Chatty, possibly 1.0.2 and other versions, allows remote attackers to inject arbitrary web script or HTML via the username.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/20259; http://securityreason.com/securityalert/963; http://securitytracker.com/id?1016152
CVE: CVE-2006-2607
Published: 2006-05-25
Description: do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf.
CVSS Score: 7.2 (HIGH)
References: http://bugs.gentoo.org/show_bug.cgi?id=134194; http://secunia.com/advisories/20380; http://secunia.com/advisories/20388
CVE: CVE-2006-2608
Published: 2006-05-26
Description: artmedic newsletter 4.1 and possibly other versions, when register_globals is enabled, allows remote attackers to modify arbitrary files and execute arbitrary PHP code via the logfile parameter in a direct request to log.php, which causes the $logfile variable to be redefined to an attacker-controlled value, as demonstrated by injecting PHP code into info.php.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/20204; http://securityreason.com/securityalert/957; http://www.securityfocus.com/archive/1/434738/100/0/threaded
CVE: CVE-2006-2609
Published: 2006-05-26
Description: artmedic newsletter 4.1.2 and possibly other versions, when register_globals is enabled, allows remote attackers to modify arbitrary files and execute arbitrary PHP code via the email parameter to newsletter_log.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/20204; http://www.vupen.com/english/advisories/2006/1930; http://secunia.com/advisories/20204
CVE: CVE-2006-2610
Published: 2006-05-26
Description: Cross-site scripting (XSS) vulnerability in view.php in phpRaid 2.9.5 allows remote attackers to inject arbitrary web script or HTML via the (1) URL query string and the (2) Sort parameter.
CVSS Score: 2.6 (LOW)
References: http://securityreason.com/securityalert/962; http://www.securityfocus.com/archive/1/434736/100/0/threaded; http://www.securityfocus.com/bid/18042
CVE: CVE-2006-2611
Published: 2006-05-26
Description: Cross-site scripting (XSS) vulnerability in includes/Sanitizer.php in the variable handler in MediaWiki 1.6.x before r14349 allows remote attackers to inject arbitrary Javascript via unspecified vectors, possibly involving the usage of the | (pipe) character.
CVSS Score: 4.3 (MEDIUM)
References: http://bugzilla.wikimedia.org/show_bug.cgi?id=6055; http://mail.wikipedia.org/pipermail/wikitech-l/2006-May/035812.html; http://mail.wikipedia.org/pipermail/wikitech-l/2006-May/035814.html
CVE: CVE-2006-2612
Published: 2006-05-26
Description: Novell Client for Windows 4.8 and 4.9 does not restrict access to the clipboard contents while a machine is locked, which allows users with physical access to read the current clipboard contents by pasting them into the "User Name" field on the login prompt.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/20194; http://securityreason.com/securityalert/961; http://www.osvdb.org/25760
CVE: CVE-2006-2613
Published: 2006-05-26
Description: Mozilla Suite 1.7.13, Mozilla Firefox 1.5.0.3 and possibly other versions before before 1.8.0, and Netscape 7.2 and 8.1, and possibly other versions and products, allows remote user-assisted attackers to obtain information such as the installation path by causing exceptions to be thrown and checking the message contents.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/20244; http://secunia.com/advisories/20255; http://secunia.com/advisories/20256
CVE: CVE-2006-2614
Published: 2006-05-26
Description: Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts (1) /cr/hd_jobs_db.sh, (2) /cr/hd_plan_checkin.sh, and (3) /cr/oracle_plan_checkin.sh, which allows local users to obtain System Manager passwords.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/20127; http://securitytracker.com/id?1016119; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102024-1
CVE: CVE-2006-2615
Published: 2006-05-26
Description: ping.php in Russcom.Ping allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20236; http://securityreason.com/securityalert/956; http://www.securityfocus.com/archive/1/434825/100/0/threaded
CVE: CVE-2006-2616
Published: 2006-05-26
Description: SQL injection vulnerability in the search script in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to execute arbitrary SQL commands via the uri parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20276; http://secunia.com/advisories/20278; http://securityreason.com/securityalert/955
CVE: CVE-2006-2617
Published: 2006-05-26
Description: (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field on the login page, which causes the path to be displayed in an SQL error.  NOTE: this issue might be resultant from SQL injection.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/20276; http://secunia.com/advisories/20278; http://securityreason.com/securityalert/955
CVE: CVE-2006-2618
Published: 2006-05-26
Description: Cross-site scripting (XSS) vulnerability in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box.  NOTE: since user reviews do not require administrator privileges, and an auto-approve mechanism exists, this issue is a vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/955; http://www.securityfocus.com/archive/1/434912/100/0/threaded; http://www.sitepoint.com/forums/showthread.php?t=311969
CVE: CVE-2006-1054
Published: 2006-05-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-1861.  Reason: This candidate is a reservation duplicate of CVE-2006-1861.  Notes: All CVE users should reference CVE-2006-1861 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-2629
Published: 2006-05-27
Description: Race condition in Linux kernel 2.6.15 to 2.6.17, when running on SMP platforms, allows local users to cause a denial of service (crash) by creating and exiting a large number of tasks, then accessing the /proc entry of a task that is exiting, which causes memory corruption that leads to a failure in the prune_dcache function or a BUG_ON error in include/linux/list.h.
CVSS Score: 4.0 (MEDIUM)
References: http://marc.info/?l=linux-kernel&m=[PII_REDACTED]1543&w=2; http://secunia.com/advisories/20349; http://www.osvdb.org/25847
CVE: CVE-2006-2630
Published: 2006-05-27
Description: Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046355.html; http://secunia.com/advisories/20318; http://securityresponse.symantec.com/avcenter/security/Content/2006.05.25.html
CVE: CVE-2006-2631
Published: 2006-05-27
Description: phpFoX allows remote authenticated users to modify arbitrary accounts via a modified NATIO cookie value, possibly the phpfox_user parameter.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/20280; http://securityreason.com/securityalert/969; http://www.securityfocus.com/archive/1/435001/100/0/threaded
CVE: CVE-2006-2453
Published: 2006-05-28
Description: Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://secunia.com/advisories/20254; http://secunia.com/advisories/20339; http://secunia.com/advisories/20422
CVE: CVE-2006-1174
Published: 2006-05-28
Description: useradd in shadow-utils before 4.0.3, and possibly other versions before 4.0.8, does not provide a required argument to the open function when creating a new user mailbox, which causes the mailbox to be created with unpredictable permissions and possibly allows attackers to read or modify the mailbox.
CVSS Score: 3.7 (LOW)
CWE: CWE-264
References: ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc; http://cvs.pld.org.pl/shadow/NEWS?rev=1.109; http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html
CVE: CVE-2006-2563
Published: 2006-05-29
Description: The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null characters.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/20337; http://secunia.com/advisories/21050; http://secunia.com/advisories/21847
CVE: CVE-2006-2632
Published: 2006-05-30
Description: Cross-site scripting (XSS) vulnerability in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via file descriptions.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/20304; http://securityreason.com/securityalert/968; http://sourceforge.net/forum/forum.php?forum_id=576219
CVE: CVE-2006-2633
Published: 2006-05-30
Description: Absolute path traversal vulnerability in the copy action in index.php in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users to create or overwrite files in other users' directories by specifying the absolute path of the directory in the infolder parameter and simultaneously specifying the filename in the filepath parameter.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/20304; http://securityreason.com/securityalert/968; http://sourceforge.net/forum/forum.php?forum_id=576219
CVE: CVE-2006-2634
Published: 2006-05-30
Description: Cross-site scripting (XSS) vulnerability in Neocrome Land Down Under (LDU) in Neocrome Seditio 102 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer field.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/20307; http://securityreason.com/securityalert/967; http://www.securityfocus.com/archive/1/435145/100/0/threaded