deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-0269
Published: 2006-01-18
Description: Unspecified vulnerability in the Streams Capture component of Oracle Database server 10.1.0.5 and 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB25.  NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the SET_DIRECTORY_ROOT function in the DBMS_CDC_PUBLISH package.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0270
Published: 2006-01-18
Description: Unspecified vulnerability in the Transparent Data Encryption (TDE) Wallet component of Oracle Database server 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB27.  NOTE: Oracle has not disputed a reliable researcher report that TDA stores the master key without encryption, which allows local users to obtain the key via the SGA.
CVSS Score: 10.0 (HIGH)
CWE: CWE-310
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0271
Published: 2006-01-18
Description: Unspecified vulnerability in the Upgrade & Downgrade component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB28.  NOTE: details are unavailable from Oracle, but they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the DBMS_REGISTRY package in certain parameters to the (1) IS_COMPONENT, (2) GET_COMP_OPTION, (3) DISABLE_DDL_TRIGGERS, (4) SCRIPT_EXISTS, (5) COMP_PATH, (6) GATHER_STATS, (7) NOTHING_SCRIPT, and (8) VALIDATE_COMPONENTS functions.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0272
Published: 2006-01-18
Description: Unspecified vulnerability in the XML Database component of Oracle Database server 9.2.0.7 and 10.1.0.4 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB29.  NOTE: based on mutual credits by the relevant sources, it is highly likely that this issue is a buffer overflow in the (a) DBMS_XMLSCHEMA and (b) DBMS_XMLSCHEMA_INT packages, as exploitable via long arguments to (1) XDB.DBMS_XMLSCHEMA.GENERATESCHEMA or (2) XDB.DBMS_XMLSCHEMA.GENERATESCHEMAS.
CVSS Score: 9.0 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0893.html; http://secunia.com/advisories/18493; http://secunia.com/advisories/18608
CVE: CVE-2006-0273
Published: 2006-01-18
Description: Unspecified vulnerability in the Portal component of Oracle Application Server 9.0.4.2 and 10.1.2.0 has unspecified impact and attack vectors, as identified by Oracle Vuln# AS01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0274
Published: 2006-01-18
Description: Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 and 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# REP03.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0275
Published: 2006-01-18
Description: Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# REP04.  NOTE: Oracle has not disputed reliable researcher claims that this issue is related to directory traversal that allows reading of portions of arbitrary XML files via the customize parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0276
Published: 2006-01-18
Description: Multiple unspecified vulnerabilities in Oracle Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i) have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) OCS01, 2) OCS02, 3) OCS03, 4) OCS04, 5) OCS05, 6) OCS06, 7) OCS07, (8) OCS08, and (9) OCS09 in the (a) Email Server component; 10) OCS10 (and (11) OCS11 in the (b) Oracle Collaboration Suite Wireless & Voice (component; 12) OCS12 and (13) OCS13 in the (c) Oracle Content (Management SDK component; 14) OCS14 and (15) OCS15 in the (d) Oracle (Content Services component.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0277
Published: 2006-01-18
Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) APPS01 in the (a) Application Install component; (2) APPS07 in the (b) Oracle Applications Framework component; (3) APPS08, (4) APPS09, (5) APPS10, and (6) APPS11 in the (c) Oracle Applications Technology Stack component; (7) APPS12 in the (d) Oracle Human Resources component; (8) APPS15 and (9) APPS16 in the (e) Oracle Marketing component; (10) APPS17 in the (f) Marketing Encyclopedia System component; (11) APPS18 in the (g) Oracle Trade Management component; and (12) APPS19 in the (h) Oracle Web Applications Desktop Integration component.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0278
Published: 2006-01-18
Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) APPS02 in the (a) CRM Technical Foundation component; (2) APPS03 in the (b) iProcurement component; and (3) APPS04, (4) APPS05, and (5) APPS06 in the Oracle Application Object Library component.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0279
Published: 2006-01-18
Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 4.3 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) APPS13 and (2) APPS14 in the Oracle iLearning component.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0280
Published: 2006-01-18
Description: Unspecified vulnerability in Oracle PeopleSoft Enterprise Portal 8.4 Bundle 15, 8.8 Bundle 10, and 8.9 Bundle 2 has unspecified impact and attack vectors, as identified by Oracle Vuln# PSE01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0281
Published: 2006-01-18
Description: Unspecified vulnerability in Oracle JD Edwards HTML Server 8.95.F1 SP23_L1 has unspecified impact and attack vectors, as identified by Oracle Vuln# JDE01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0282
Published: 2006-01-18
Description: Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, and 10.1.2.0.2, and Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i) has unspecified impact and attack vectors, as identified by Oracle Vuln# DBC01 in the Protocol Support component.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0283
Published: 2006-01-18
Description: Unspecified vulnerability in Oracle Database Server 10.1.0.4.2, Application Server 10.1.2.0.2, and Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i) has unspecified impact and attack vectors, as identified by Oracle Vuln# DBC02 in the Reorganize Objects & Convert Tablespace component.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0284
Published: 2006-01-18
Description: Multiple unspecified vulnerabilities in Oracle Application Server 9.0.4.2 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10, have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) FORM01 and (2) FORM02 in the Oracle Forms component.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0285
Published: 2006-01-18
Description: Unspecified vulnerability in the Java Net component of Oracle Database Server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.4, and Application Server 1.0.2.2, 9.0.4.2, and 10.1.2.0.2, has unspecified impact and attack vectors, as identified by Oracle Vuln# JN01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0286
Published: 2006-01-18
Description: Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 9.0.1.5, 9.0.1.5 FIPS, 9.2.0.7, and 10.1.0.5, and Application Server 1.0.2.2, 9.0.4.2, and 10.1.2.0.2, has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0287
Published: 2006-01-18
Description: Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server 10.1.2.0.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# OHS02.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0288
Published: 2006-01-18
Description: Multiple unspecified vulnerabilities in the Oracle Reports Developer component of Oracle Application Server 9.0.4.1 and E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) REP01 and (2) REP02.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0289
Published: 2006-01-18
Description: Multiple unspecified vulnerabilities in Oracle Application Server 6.0.8.26(PS17) and E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) REP05 and (2) REP06 in the Oracle Reports Developer component. NOTE: Oracle has not disputed reliable researcher claims that REP05 is the same as CVE-2005-2378 and REP06 is the same as CVE-2005-2371, both of which involve directory traversal.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0290
Published: 2006-01-18
Description: Unspecified vulnerability in Oracle Database Server 9.2.0.7, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i), and E-Business Suite and Applications 11.5.10 has unspecified impact and attack vectors, as identified by Oracle Vuln# WF01 in the Oracle Workflow Cartridge component.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0291
Published: 2006-01-18
Description: Multiple unspecified vulnerabilities in Oracle Database Server 10.2.0.1, Application Server 9.0.4.2 and 10.1.2.1, Collaboration Suite Release 2, version 9.0.4.2 (Oracle9i), and E-Business Suite and Applications 11.5.10 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) WF02 and (2) WF03 in the Oracle Workflow Cartridge component.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18493; http://secunia.com/advisories/18608; http://securitytracker.com/id?1015499
CVE: CVE-2006-0302
Published: 2006-01-19
Description: ZyXel P2000W VoIP 802.11b Wireless Phone running firmware WV.00.02 allows remote attackers to obtain sensitive information, such as MAC address and software version, by directly accessing UDP port 9090.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041438.html; http://secunia.com/advisories/18511; http://www.osvdb.org/22516
CVE: CVE-2006-0303
Published: 2006-01-19
Description: Multiple unspecified vulnerabilities in the (1) publishing component, (2) Contact Component, (3) TinyMCE Compressor, and (4) other components in Joomla! 1.0.5 and earlier have unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18513; http://www.joomla.org/content/view/738/66/; http://secunia.com/advisories/18513
CVE: CVE-2006-0304
Published: 2006-01-19
Description: Buffer overflow in Dual DHCP DNS Server 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the DHCP options field.
CVSS Score: 7.5 (HIGH)
References: http://aluigi.altervista.org/adv/dualsbof-adv.txt; http://secunia.com/advisories/18486; http://securitytracker.com/id?1015495
CVE: CVE-2006-0305
Published: 2006-01-19
Description: Clipcomm CPW-100E VoIP 802.11b Wireless Handset Phone running firmware 1.1.12 (051129) and CP-100E VoIP 802.11b Wireless Phone running firmware 1.1.60 allows remote attackers to gain unauthorized access via the debug service on TCP port 60023.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041436.html; http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041439.html; http://secunia.com/advisories/18505
CVE: CVE-2006-0306
Published: 2006-01-19
Description: The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2, and CA Business Protection Suite r2 allows remote attackers to cause a denial of service (CPU consumption or application hang) via a large network packet, which causes a WSAEMESGSIZE error code that is not handled, leading to a thread exit.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/18531; http://securitytracker.com/id?1015504; http://supportconnectw.ca.com/public/ca_common_docs/dmdeploysecurity_notice.asp
CVE: CVE-2006-0307
Published: 2006-01-19
Description: The DM Primer in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup r4.0, BrightStor ARCserve Backup for Laptops & Desktops r11.0, r11.1, r11.1 SP1, Unicenter Remote Control 6.0, 6.0 SP1, CA Desktop Protection Suite r2, CA Server Protection Suite r2, and CA Business Protection Suite r2 allows remote attackers to cause a denial of service (CPU consumption and log file consumption) via unspecified "unrecognized network messages" that are not properly handled.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/18531; http://securitytracker.com/id?1015504; http://supportconnectw.ca.com/public/ca_common_docs/dmdeploysecurity_notice.asp
CVE: CVE-2006-0308
Published: 2006-01-19
Description: PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other versions, module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the filnavn parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/16282; https://exchange.xforce.ibmcloud.com/vulnerabilities/33092; https://www.exploit-db.com/exploits/3524
CVE: CVE-2006-0226
Published: 2006-01-19
Description: Integer overflow in IEEE 802.11 network subsystem (ieee80211_ioctl.c) in FreeBSD before 6.0-STABLE, while scanning for wireless networks, allows remote attackers to execute arbitrary code by broadcasting crafted (1) beacon or (2) probe response frames.
CVSS Score: 10.0 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:05.80211.asc; http://kernelwars.blogspot.com/2007/01/alive.html; http://secunia.com/advisories/18353
CVE: CVE-2006-0309
Published: 2006-01-19
Description: Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packets with a null IP option length.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/18461; http://securitytracker.com/id?1015490; http://www.securityfocus.com/archive/1/421929/100/0/threaded
CVE: CVE-2006-0310
Published: 2006-01-19
Description: Cross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a javascript URI in the BBcode url tag.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2006-01/0322.html; http://evuln.com/vulns/37/summary.html; http://mikeheltonisawesome.com/viewcomments.php?idd=46
CVE: CVE-2006-0311
Published: 2006-01-19
Description: SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2006-01/0322.html; http://evuln.com/vulns/37/summary.html; http://mikeheltonisawesome.com/viewcomments.php?idd=46
CVE: CVE-2006-0312
Published: 2006-01-19
Description: create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the uza parameter to 1.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2006-01/0322.html; http://evuln.com/vulns/37/summary.html; http://mikeheltonisawesome.com/viewcomments.php?idd=46
CVE: CVE-2006-0313
Published: 2006-01-19
Description: Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving (1) util.php, (2) userpref.php, (3) user.php, (4) uploadfrm.php, (5) title.php, (6) team.php, (7) stats.php, (8) page.php, (9) org.php, (10) member.php, (11) index.php, (12) group.php, or (13) anniv.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18459; http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682; http://www.osvdb.org/22403
CVE: CVE-2006-0314
Published: 2006-01-19
Description: PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities.
CVSS Score: 7.5 (HIGH)
References: http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682; http://www.osvdb.org/22402; http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682
CVE: CVE-2006-0315
Published: 2006-01-19
Description: index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename, which allows remote attackers to conduct directory traversal attacks, and produces resultant cross-site scripting (XSS) and path disclosure.
CVSS Score: 5.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0515.html; http://secunia.com/advisories/18043; http://www.osvdb.org/22684
CVE: CVE-2006-0316
Published: 2006-01-19
Description: Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures (YGP) Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
References: http://news.com.com/2061-10789_3-6027865.html?part=rss&tag=6027865&subj=news; http://secunia.com/advisories/18521; http://securitytracker.com/id?1015494
CVE: CVE-2006-0317
Published: 2006-01-19
Description: Cross-site scripting (XSS) vulnerability in rkrt_stats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attackers to inject arbitrary web script or HTML via a query string value as a GET, which is stored in the $QUERY_STRING variable.  NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/18473; http://www.securityfocus.com/bid/16266; http://www.vupen.com/english/advisories/2006/0197
CVE: CVE-2006-0318
Published: 2006-01-19
Description: SQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://evuln.com/vulns/34/summary; http://secunia.com/advisories/18467; http://www.osvdb.org/22495
CVE: CVE-2006-0319
Published: 2006-01-19
Description: Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote attackers to create arbitrary files via ".." (dot dot) sequences in a (1) PUT, (2) SIZE, and possibly other commands.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]0654&w=2; http://secunia.com/advisories/18508; http://www.lort.dk/DSR-farmerswife44sp1.pl
CVE: CVE-2006-0320
Published: 2006-01-19
Description: SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password parameter.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/31/summary; http://secunia.com/advisories/18464; http://www.osvdb.org/22445
CVE: CVE-2006-0322
Published: 2006-01-19
Description: Unspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5.6 and 1.4.x before 1.4.14 allows attackers to cause a denial of service (infinite loop) via "certain malformed links."
CVSS Score: 5.0 (MEDIUM)
References: http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html; http://secunia.com/advisories/18711; http://secunia.com/advisories/18717
CVE: CVE-2006-0324
Published: 2006-01-19
Description: SQL injection vulnerability in WebspotBlogging 3.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter to login.php.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/41/summary.html; http://secunia.com/advisories/18560; http://securityreason.com/securityalert/356
CVE: CVE-2006-0019
Published: 2006-01-20
Description: Heap-based buffer overflow in the encodeURI and decodeURI functions in the kjs JavaScript interpreter engine in KDE 3.2.0 through 3.5.0 allows remote attackers to execute arbitrary code via a crafted, UTF-8 encoded URI.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.kde.org/pub/kde/security_patches/post-3.4.3-kdelibs-kjs.diff; http://secunia.com/advisories/18500; http://secunia.com/advisories/18540
CVE: CVE-2006-0045
Published: 2006-01-20
Description: crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/18545; http://secunia.com/advisories/18573; http://www.debian.org/security/2006/dsa-949