rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-2428 
add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed.  NOTE: some of these details are obtained from third party information, since the raw source is vague.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-17T10:00:00.000Z
CVE-2006-2429 
Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown impact and remote attack vectors related to "HTTP request handlers".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-17T10:00:00.000Z
CVE-2006-2430 
IBM WebSphere Application Server 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7 records user credentials in plaintext in addNode.log, which allows attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-17T10:00:00.000Z
CVE-2006-2431 
Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows remote attackers to inject arbitrary web script or HTML via the URI, which is contained in a FAULTACTOR element on this page.  NOTE: some sources have reported the element as "faultfactor," but this is likely erroneous.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-17T10:00:00.000Z
CVE-2006-2432 
IBM WebSphere Application Server 5.0.2 (or any earlier cumulative fix) and 5.1.1 (or any earlier cumulative fix) allows EJB access on Solaris systems via a crafted LTPA token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-17T10:00:00.000Z
CVE-2006-2433 
Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown impact and attack vectors related to the "administrative console".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-17T10:00:00.000Z
CVE-2006-2434 
Unspecified vulnerability in WebSphere 5.1.1 (or any earlier cumulative fix) Common Configuration Mode + CommonArchive and J2EE Models might allow attackers to obtain sensitive information via the trace.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-17T10:00:00.000Z
CVE-2006-2435 
Unspecified vulnerability in IBM WebSphere Application Server 5.0.2 and earlier, and 5.1.1 and earlier, has unknown impact and attack vectors related to "Inserting certain script tags in urls [that] may allow unintended execution of scripts."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-17T10:00:00.000Z
CVE-2006-2436 
WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-17T10:00:00.000Z
CVE-2006-2437 
The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to obtain the source code for file under the web root via the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-17T10:00:00.000Z
CVE-2006-2438 
Directory traversal vulnerability in the viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to read arbitrary files under other web roots via the contextpath parameter.  NOTE: this issue can produce resultant path disclosure when the parameter is invalid.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-17T10:00:00.000Z
CVE-2006-2439 
Stack-based buffer overflow in ZipCentral 4.01 allows remote user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2440 
Heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 might allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-18T10:00:00.000Z
CVE-2006-2441 
Pioneers meta-server before 0.9.55, when the server-console is not installed, allows remote attackers to cause a denial of service (crash) via certain requests from an older gnocatan client to create a new game.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-18T10:00:00.000Z
CVE-2006-2442 
kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-18T10:00:00.000Z
CVE-2006-2443 
The Debian package of knowledgetree 2.0.7 creates environment.php with world-readable permissions, which allows local users to obtain sensitive information such as the username and password for the KnowledgeTree database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-18T10:00:00.000Z
CVE-2006-2444 
The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that cause failures in snmp_trap_decode that trigger (1) frees of random memory or (2) frees of previously-freed memory (double-free) by snmp_trap_decode as well as its calling function, as demonstrated via certain test cases of the PROTOS SNMP test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-25T10:00:00.000Z
CVE-2006-2445 
Race condition in run_posix_cpu_timers in Linux kernel before 2.6.16.21 allows local users to cause a denial of service (BUG_ON crash) by causing one CPU to attach a timer to a process that is exiting.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T10:00:00.000Z
CVE-2006-2446 
Race condition between the kfree_skb and __skb_unlink functions in the socket buffer handling in Linux kernel 2.6.9, and possibly other versions, allows remote attackers to cause a denial of service (crash), as demonstrated using the TCP stress tests from the LTP test suite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-15T22:00:00.000Z
CVE-2006-2447 
SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute arbitrary commands via a crafted message that is not properly handled when invoking spamd with the virtual pop username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-06T21:00:00.000Z
CVE-2006-2448 
Linux kernel before 2.6.16.21 and 2.6.17, when running on PowerPC, does not perform certain required access_ok checks, which allows local users to read arbitrary kernel memory on 64-bit systems (signal_64.c) and cause a denial of service (crash) and possibly read kernel memory on 32-bit systems (signal_32.c).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-23T10:00:00.000Z
CVE-2006-2449 
KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-15T10:00:00.000Z
CVE-2006-2450 
auth.c in LibVNCServer 0.7.1 allows remote attackers to bypass authentication via a request in which the client specifies an insecure security type such as "Type 1 - None", which is accepted even if it is not offered by the server, a different issue than CVE-2006-2369.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T22:00:00.000Z
CVE-2006-2451 
The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-07T18:00:00.000Z
CVE-2006-2452 
GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-09T10:00:00.000Z
CVE-2006-2453 
Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-28T10:00:00.000Z
CVE-2006-2458 
Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (plugins/qtextractor.c).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-18T23:00:00.000Z
CVE-2006-2459 
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL commands via the srch_where parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T10:00:00.000Z
CVE-2006-2460 
Sugar Suite Open Source (SugarCRM) 4.2 and earlier, when register_globals is enabled, does not protect critical variables such as $_GLOBALS and $_SESSION from modification, which allows remote attackers to conduct attacks such as directory traversal or PHP remote file inclusion, as demonstrated by modifying the GLOBALS[sugarEntry] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T10:00:00.000Z
CVE-2006-2461 
BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T10:00:00.000Z
CVE-2006-2462 
BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6, may send sensitive data over non-secure channels when using JTA transactions, which allows remote attackers to read potentially sensitive network traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T10:00:00.000Z
CVE-2006-2463 
view_album.php in SelectaPix 1.31 and earlier allows remote attackers to obtain the installation path via a certain request, which displays the path in an error message, possibly due to an invalid or missing parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T10:00:00.000Z
CVE-2006-2464 
stopWebLogic.sh in BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6 displays the administrator password to stdout when executed, which allows local users to obtain the password by viewing a local display.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T10:00:00.000Z
CVE-2006-2465 
Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument.  NOTE: if mp3info is not installed setuid or setgid in any reasonable context, then this issue might not be a vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T10:00:00.000Z
CVE-2006-2466 
BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 allows remote attackers to obtain the source code of JSP pages during certain circumstances related to a "timing window" when a compilation error occurs, aka the "JSP showcode vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T10:00:00.000Z
CVE-2006-2467 
BEA WebLogic Server 8.1 up to SP4, 7.0 up to SP6, and 6.1 up to SP7 displays the internal IP address of the WebLogic server in the WebLogic Server Administration Console, which allows remote authenticated administrators to determine the address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T10:00:00.000Z
CVE-2006-2468 
The WebLogic Server Administration Console in BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 displays the domain name in the Console login form, which allows remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T10:00:00.000Z
CVE-2006-2469 
The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7 stores the username and password in cleartext in the WebLogic Server log when access to a web application or protected JWS fails, which allows attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T10:00:00.000Z
CVE-2006-2470 
Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T10:00:00.000Z
CVE-2006-2471 
Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including (1) DNS and IP addresses to address to T3 clients, (2) internal sensitive information using GetIORServlet, (3) certain "server details" in exceptions when invalid XML is provided, and (4) a stack trace in a SOAP fault.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T10:00:00.000Z
CVE-2006-2472 
Unspecified vulnerability in BEA WebLogic Server 9.1 and 9.0, 8.1 through SP5, 7.0 through SP6, and 6.1 through SP7 allows untrusted applications to obtain private server keys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T10:00:00.000Z
CVE-2006-2473 
Cross-site scripting (XSS) vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbitrary web script or HTML via the p parameter.  NOTE: this issue has been disputed by the vendor and a third party who is affiliated with the product.  The vendor states "You cannot insert code in a wikipage or via URL parameters as they are all escaped before usage, so nothing can be compromised at other sites.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T17:00:00.000Z
CVE-2006-2474 
SQL injection vulnerability in lshop.cgi in Cosmoshop 8.11.106 and earlier allows remote attackers to execute arbitrary SQL commands via the artnum parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T17:00:00.000Z
CVE-2006-2475 
Directory traversal vulnerability in (1) edit_mailtexte.cgi and (2) bestmail.cgi in Cosmoshop 8.11.106 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T17:00:00.000Z
CVE-2006-2476 
Bitrix Site Manager 4.1.x stores updater.log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T17:00:00.000Z
CVE-2006-2477 
Cross-site scripting (XSS) vulnerability in the administrative interface Bitrix Site Manager 4.1.x allows remote attackers to inject arbitrary web script or HTML via unspecified inputs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T17:00:00.000Z
CVE-2006-2478 
Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a modified back_url during a HTTP POST request. NOTE: this issue has been referred to as "cross-site scripting," but that is inconsistent with the common use of the term.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T17:00:00.000Z
CVE-2006-2479 
The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of downloaded updates, which allows remote attackers to obtain sensitive information and ultimately execute arbitrary PHP code via DNS cache poisoning that redirects the user to a malicious site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T17:00:00.000Z
CVE-2006-2480 
Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename.  NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T21:00:00.000Z
CVE-2006-2481 
VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, which allows attackers to gain privileges by obtaining the cookies using attacks such as cross-site scripting (CVE-2005-3619).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T19:00:00.000Z
CVE-2006-2482 
Heap-based buffer overflow in the TZipTV component in (1) ZipTV for Delphi 7 2006.1.26 and for C++ Builder 2006-1.16, (2) PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221, and possibly other products, allows user-assisted attackers to execute arbitrary code via an ARJ archive with a long header. NOTE: the ACE archive vector is covered by CVE-2005-2856.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-08T21:00:00.000Z
CVE-2006-2483 
PHP remote file inclusion vulnerability in cart_content.php in Squirrelcart 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cart_isp_root parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T23:00:00.000Z
CVE-2006-2484 
Cross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T23:00:00.000Z
CVE-2006-2485 
PHP remote file inclusion vulnerability in includes/class_template.php in Quezza 1.0 and earlier, and possibly 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the quezza_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T23:00:00.000Z
CVE-2006-2486 
SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the userID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T23:00:00.000Z
CVE-2006-2487 
Multiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[main_path] parameter in (1) functions.php, (2) template.php, (3) news.php, (4) help.php, (5) mail.php, (6) Admin/admin_cats.php, (8) Admin/admin_edit.php, (9) Admin/admin_import.php, and (10) Admin/admin_templates.php.  NOTE: this might be resultant from a variable overwrite issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T23:00:00.000Z
CVE-2006-2488 
Multiple cross-site scripting (XSS) vulnerabilities in Spymac WebOS (WOS) 5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) del_folder, (2) nick, or (3) action parameters to (a) notes/index.php, (4) curr parameter to (b) ipod/get_ipod.php, and in (c) login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T23:00:00.000Z
CVE-2006-2489 
Integer overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a content length (Content-Length) HTTP header.  NOTE: this is a different vulnerability than CVE-2006-2162.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T23:00:00.000Z
CVE-2006-2490 
Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other versions before 2.2.3.18 for M10/D10 and 3.0.3.31 for M22, allow remote attackers to inject arbitrary web script or HTML via URL-encoded values in (1) the query string to help/help, (2) the get_image_info_abspath parameter to control/eventplayer, and (3) the source_ip parameter to events.tar.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T23:00:00.000Z
CVE-2006-2491 
Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly filtered when it is accessed using the $_SERVER["PHP_SELF"] variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-19T23:00:00.000Z
CVE-2006-2492 
Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-20T00:00:00.000Z
CVE-2006-2494 
Stack-based buffer overflow in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a crafted .map file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-20T02:59:00.000Z
CVE-2006-2495 
Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0-beta3 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-20T02:59:00.000Z
CVE-2006-2496 
Buffer overflow in iMonitor 2.4 in Novell eDirectory 8.8 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-20T02:59:00.000Z