rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-3593 
The command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to overwrite arbitrary files by redirecting a command's output to a file or folder, aka bug CSCse31704.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T20:00:00.000Z
CVE-2006-3594 
Buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T20:00:00.000Z
CVE-2006-3595 
The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require credentials, which allows remote attackers to access the server with arbitrary privilege levels, aka bug CSCsa78190.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T20:00:00.000Z
CVE-2006-3596 
The device driver for Intel-based gigabit network adapters in Cisco Intrusion Prevention System (IPS) 5.1(1) through 5.1(p1), as installed on various Cisco Intrusion Prevention System 42xx appliances, allows remote attackers to cause a denial of service (kernel panic and possibly network outage) via a crafted IP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T20:00:00.000Z
CVE-2006-3597 
passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the "Go Back" option after the final "Installation complete" message and uses the main menu, which causes the password to be zeroed out in the installer's memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T20:00:00.000Z
CVE-2006-3598 
SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle op.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T20:00:00.000Z
CVE-2006-3599 
SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id_ads parameter in an EditAds op.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T20:00:00.000Z
CVE-2006-3600 
Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp (TunePimp) 0.4.2 allow remote user-assisted attackers to cause a denial of service (application crash) and possibly execute code via a long (1) Album release date (MBE_ReleaseGetDate), (2) data, or (3) error strings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T20:00:00.000Z
CVE-2006-3601 
** UNVERIFIABLE **  Unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke (.net nuke) allows remote attackers to gain privileges via unspecified vectors, as used in an attack against the Microsoft France web site.  NOTE: due to the lack of details and uncertainty about which product is affected, this claim is not independently verifiable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T20:00:00.000Z
CVE-2006-3602 
Directory traversal vulnerability in jscripts/tiny_mce/tiny_mce_gzip.php in FarsiNews 3.0 BETA 1 allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the language parameter in the advanced theme.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T20:00:00.000Z
CVE-2006-3603 
Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T20:00:00.000Z
CVE-2006-3604 
Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access restrictions for (1) admin/aindex.asp or (2) admin/aindex.html via a .. (dot dot) and encoded / (%2f) sequence in the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T20:00:00.000Z
CVE-2006-3605 
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Transition property on an uninitialized DXImageTransform.Microsoft.RevealTrans.1 ActiveX Object, which triggers a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T20:00:00.000Z
CVE-2006-3606 
Unspecified vulnerability in Sun Solaris X Inter Client Exchange library (libICE) on Solaris 8 and 9 allows context-dependent attackers to cause a denial of service (application crash) to applications that use the library.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T21:00:00.000Z
CVE-2006-3607 
Multiple cross-site scripting (XSS) vulnerabilities in Softbiz Banner Exchange Script (aka Banner Exchange Network Script) 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the city parameter in (a) insertmember.php, and (2) a PHPSESSID cookie in (b) lostpassword.php, (c) gen_confirm_mem.php, and (d) index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T21:00:00.000Z
CVE-2006-3608 
The Gallery module in Simone Vellei Flatnuke 2.5.7 and earlier, when Gallery uploads are enabled, does not restrict the extensions of uploaded files that begin with a GIF header, which allows remote authenticated users to execute arbitrary PHP code via an uploaded .php file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T21:00:00.000Z
CVE-2006-3609 
Cross-site scripting (XSS) vulnerability in index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to inject arbitrary web script or HTML via the page_name parameter with an IMG tag containing a javascript URI in the SRC attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T21:00:00.000Z
CVE-2006-3610 
index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to obtain sensitive information (partial database schema) via a modified page_name parameter, which reflects portions of an SQL query in the result.  NOTE: it is not clear whether the information is target-specific. If not, then this issue is not an exposure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T21:00:00.000Z
CVE-2006-3611 
Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[template] parameter, as demonstrated by injecting PHP sequences into a log file, which is then included by pm.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T21:00:00.000Z
CVE-2006-3612 
Cross-site scripting (XSS) vulnerability in Phorum 5.1.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T21:00:00.000Z
CVE-2006-3613 
Multiple cross-site scripting (XSS) vulnerabilities in Chamberland Technology ezWaiter 3.0 Online and possibly Enterprise Software (aka enterprise edition) allow remote attackers to inject arbitrary web script or HTML via the (1) itemfor (aka "Who is this item for?") and (2) special (aka "Special Instructions") parameters to item.php, which is accessed from showorder.php, or (3) unspecified parameters to the login form at login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T21:00:00.000Z
CVE-2006-3614 
index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to trigger a SQL error via the page_name parameter, possibly due to a SQL injection vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T21:00:00.000Z
CVE-2006-3615 
Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via unspecified vectors related to an uninitialized variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T21:00:00.000Z
CVE-2006-3616 
Multiple cross-site scripting (XSS) vulnerabilities in Carbonize Lazarus Guestbook 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in codes-english.php and (2) the img parameter in picture.php, after the name of an existing file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T21:00:00.000Z
CVE-2006-3617 
Cross-site scripting (XSS) vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) message (aka comments), (3) website, and (4) email parameters, which bypasses XSS protection mechanisms that check for SCRIPT tags but not others, as demonstrated by a javascript URI in an onMouseOver attribute and the src attribute in an iframe tag.  NOTE: some vectors might overlap CVE-2006-2975, although the use of alternate manipulations makes it unclear.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T21:00:00.000Z
CVE-2006-3618 
SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) website, (4) comments, (5) rate, and (6) private parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T21:00:00.000Z
CVE-2006-3619 
Directory traversal vulnerability in FastJar 0.93, as used in Gnu GCC 4.1.1 and earlier, and 3.4.6 and earlier, allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filenames with "../" sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-25T19:00:00.000Z
CVE-2006-3620 
Cross-site scripting (XSS) vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to inject arbitrary web script or HTML via the toid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T23:00:00.000Z
CVE-2006-3621 
SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary SQL commands via the toid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T23:00:00.000Z
CVE-2006-3622 
The showtopic module in Koobi Pro CMS 5.6 allows remote attackers to obtain sensitive information via a ' (single quote) in the p parameter, which displays the path in an error message.  NOTE: it is not clear whether this is SQL injection or a forced SQL error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T23:00:00.000Z
CVE-2006-3623 
Directory traversal vulnerability in Framework Service component in McAfee ePolicy Orchestrator agent 3.5.0.x and earlier allows remote attackers to create arbitrary files via a .. (dot dot) in the directory and filename in a PropsResponse (PackageType) request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T23:00:00.000Z
CVE-2006-3624 
Multiple cross-site scripting (XSS) vulnerabilities in FLV Players 8 allow remote attackers to inject arbitrary web script or HTML via the url parameter to (1) player.php or (2) popup.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T23:00:00.000Z
CVE-2006-3625 
FLV Players 8 allows remote attackers to obtain sensitive information via (1) a direct request to paginate.php or (2) an invalid p parameter to player.php, which reveal the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-14T23:00:00.000Z
CVE-2006-3626 
Race condition in Linux kernel 2.6.17.4 and earlier allows local users to gain root privileges by using prctl with PR_SET_DUMPABLE in a way that causes /proc/self/environ to become setuid root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-15T01:06:00.000Z
CVE-2006-3627 
Unspecified vulnerability in the GSM BSSMAP dissector in Wireshark (aka Ethereal) 0.10.11 to 0.99.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3628 
Multiple format string vulnerabilities in Wireshark (aka Ethereal) 0.10.x to 0.99.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) ANSI MAP, (2) Checkpoint FW-1, (3) MQ, (4) XML, and (5) NTP dissectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3629 
Unspecified vulnerability in the MOUNT dissector in Wireshark (aka Ethereal) 0.9.4 to 0.99.0 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3630 
Multiple off-by-one errors in Wireshark (aka Ethereal) 0.9.7 to 0.99.0 have unknown impact and remote attack vectors via the (1) NCP NMAS and (2) NDPS dissectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3631 
Unspecified vulnerability in the SSH dissector in Wireshark (aka Ethereal) 0.9.10 to 0.99.0 allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3632 
Buffer overflow in Wireshark (aka Ethereal) 0.8.16 to 0.99.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the NFS dissector.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3633 
OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on the CVS server via shell metacharacters in a filename that is committed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-27T01:00:00.000Z
CVE-2006-3634 
The (1) __futex_atomic_op and (2) futex_atomic_cmpxchg_inatomic functions in Linux kernel 2.6.17-rc4 to 2.6.18-rc2 perform the atomic futex operation in the kernel address space instead of the user address space, which allows local users to cause a denial of service (crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-04T23:00:00.000Z
CVE-2006-3635 
The ia64 subsystem in the Linux kernel before 2.6.26 allows local users to cause a denial of service (stack consumption and system crash) via a crafted application that leverages the mishandling of invalid Register Stack Engine (RSE) state.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-07T03:00:00.000Z
CVE-2006-3636 
Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-3637 
Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle various HTML layout component combinations, which allows user-assisted remote attackers to execute arbitrary code via a crafted HTML file that leads to memory corruption, aka "HTML Rendering Memory Corruption Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-08T23:00:00.000Z
CVE-2006-3638 
Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code, as demonstrated by the Nth function in the DirectAnimation.DATuple ActiveX control, aka "COM Object Instantiation Memory Corruption Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-08T23:00:00.000Z
CVE-2006-3639 
Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects, which allows remote attackers to read cross-domain web pages and possibly execute code via unspecified vectors involving a crafted web page, aka "Source Element Cross-Domain Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T00:00:00.000Z
CVE-2006-3640 
Microsoft Internet Explorer 5.01 and 6 allows certain script to persist across navigations between pages, which allows remote attackers to obtain the window location of visited web pages in other domains or zones, aka "Window Location Information Disclosure Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T00:00:00.000Z
CVE-2006-3643 
Cross-site scripting (XSS) vulnerability in Internet Explorer 5.01 and 6 in Microsoft Windows 2000 SP4 permits access to local "HTML-embedded resource files" in the Microsoft Management Console (MMC) library, which allows remote authenticated users to execute arbitrary commands, aka "MMC Redirect Cross-Site Scripting Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T00:00:00.000Z
CVE-2006-3647 
Integer overflow in Microsoft Word 2000, 2002, 2003, 2004 for Mac, and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word document, which overflows a 16-bit integer length value, aka "Memmove Code Execution," a different vulnerability than CVE-2006-3651 and CVE-2006-4693.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-10T22:00:00.000Z
CVE-2006-3648 
Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors involving unhandled exceptions, memory resident applications, and incorrectly "unloading chained exception."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T01:00:00.000Z
CVE-2006-3649 
Buffer overflow in Microsoft Visual Basic for Applications (VBA) SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assisted attackers to execute arbitrary code via unspecified document properties that are not verified when VBA is invoked to open documents.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T00:00:00.000Z
CVE-2006-3650 
Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-assisted attackers to execute arbitrary code via a Word document with an embedded malformed chart record that triggers an overwrite of pointer values with values from the document, a different vulnerability than CVE-2006-3434, CVE-2006-3864, and CVE-2006-3868.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-10T22:00:00.000Z
CVE-2006-3651 
Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via a crafted mail merge file, a different vulnerability than CVE-2006-3647 and CVE-2006-4693.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-10T22:00:00.000Z
CVE-2006-3652 
Microsoft Internet Security and Acceleration (ISA) Server 2004 allows remote attackers to bypass file extension filters via a request with a trailing "#" character.  NOTE: as of 20060715, this could not be reproduced by third parties.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T19:00:00.000Z
CVE-2006-3653 
wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service (CPU consumption or crash) via crafted (1) Works, (2) Excel, and (3) Lotus 1-2-3 files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T19:00:00.000Z
CVE-2006-3654 
Buffer overflow in wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service (CPU consumption or crash) via crafted Excel files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T19:00:00.000Z
CVE-2006-3655 
Unspecified vulnerability in mso.dll in Microsoft PowerPoint 2003 allows user-assisted attackers to execute arbitrary code via a crafted PowerPoint file.  NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3656, CVE-2006-3660, and CVE-2006-3590, although it is possible that they are all different.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T19:00:00.000Z
CVE-2006-3656 
Unspecified vulnerability in Microsoft PowerPoint 2003 allows user-assisted attackers to cause memory corruption via a crafted PowerPoint file, which triggers the corruption when the file is closed.  NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3655, CVE-2006-3660, and CVE-2006-3590, although it is possible that they are all different.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T19:00:00.000Z
CVE-2006-3657 
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (stack overflow exception) via a DXImageTransform.Microsoft.Gradient ActiveX object with a long (1) StartColorStr or (2) EndColorStr property.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T19:00:00.000Z
CVE-2006-3658 
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by accessing the object references of a FolderItem ActiveX object, which triggers a null dereference in the security check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T19:00:00.000Z
CVE-2006-3659 
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the location or URL property of a MHTMLFile ActiveX object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T19:00:00.000Z
CVE-2006-3660 
Unspecified vulnerability in Microsoft PowerPoint 2003 has unknown impact and user-assisted attack vectors related to powerpnt.exe. NOTE: due to the lack of available details as of 20060717, it is unclear how this is related to CVE-2006-3655, CVE-2006-3656, and CVE-2006-3590, although it is possible that they are all different.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T19:00:00.000Z