rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-5339 
Unspecified vulnerability in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_geom, aka Vuln# DB11.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB11 is related to "length checking" in the RELATE function before MD2.RELATE is called.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5340 
Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 have unknown impact and remote authenticated attack vectors related to (1) mdsys.sdo_lrs, aka Vuln# DB13, and (2) Vuln# DB17.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB13 is related to bypassing input validation for SQL injection related to convert_to_lrs_layer and dbms_assert, and DB17 is related to SQL injection in the trigger in the SDO_DROP_USER package.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5341 
Multiple unspecified vulnerabilities in XMLDB component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.2 have unknown impact and remote authenticated attack vectors, aka (1) Vuln# DB14 and (2) DB15 related to xdb.dbms_xdbz.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB14 is for SQL injection in the PITRIG_DROP and PITRIG_DROPMETADATA functions in XDB_PITRIG_PKG, and DB15 is for SQL injection in DISABLE_HIERARCHY_INTERNAL in DBMS_XDBZ.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5342 
Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.3 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_tune, aka Vuln# DB18.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB18 might be related to SQL injection in the EXTENT_OF function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5343 
Unspecified vulnerability in Database Scheduler component in Oracle Database 10.1.0.3 has unknown impact and remote authenticated attack vectors related to sys.dbms_scheduler, aka Vuln# DB19.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5344 
Multiple unspecified vulnerabilities in Oracle Spatial component in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 have unknown impact and remote authenticated attack vectors related to (1) mdsys.sdo_3gl, aka Vuln# DB20, and (2) mdsys.sdo_cs, aka DB21.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB20 is a buffer overflow in GEOM_OPERATION, and DB21 is related to a buffer overflow and SQL injection in TRANSFORM_LAYER.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5345 
Unspecified vulnerability in Oracle Spatial component in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.4 has unknown impact and remote authenticated attack vectors related to mdsys.sdo_geom, aka Vuln# DB22.  NOTE: as of 20061023, Oracle has not disputed reports from reliable third parties that DB22 is related to "length checking" in the RELATE function before MD2.RELATE is called.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5346 
Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, as used in Oracle Collaboration Suite 9.0.4.2 and Oracle E-Business Suite and Applications 11.5.10CU2, has unknown impact and remote attack vectors related to htdigest, aka Vuln# OHS02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5347 
Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle Collaboration Suite 9.0.4.2 has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS04.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5348 
Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, Oracle Collaboration Suite 9.0.4.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS05.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5349 
Unspecified vulnerability in Oracle HTTP Server 9.2.0.7, when running on HP Tru64 UNIX, has unknown impact and remote attack vectors related to HTTPS and SSL, aka Vuln# OHS07.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5350 
Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and local attack vectors, aka Vuln# OHS08.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5351 
Multiple unspecified vulnerabilities in Oracle Application Express (formerly Oracle HTML DB) 1.5 up to 2.0 have unknown impact and remote attack vectors, aka Vuln# (1) APEX01, (2) APEX02, (3) APEX03, (4) APEX05, (5) APEX06, (6) APEX07, (7) APEX08, (8) APEX09, (9) APEX10, (10) APEX11, (11) APEX12, (12) APEX13, (13) APEX14, (14) APEX15, (15) APEX16, (16) APEX17, (17) APEX18, (18) APEX19, (19) APEX22, (20) APEX23, (21) APEX24, (22) APEX25, (23) APEX26, (24) APEX27, (25) APEX28, (26) APEX29, (27) APEX30, (28) APEX31, (29) APEX32, (30) APEX33, (31) APEX34, and (32) APEX35.  NOTE: as of 20061027, it is likely that some of these identifiers are associated with cross-site scripting (XSS) in WWV_FLOW_ITEM_HELP and NOTIFICATION_MSG, but these have been provided separate identifiers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5352 
Multiple unspecified vulnerabilities in Oracle Application Express 1.5 up to 1.6.1 have unknown impact and remote attack vectors, aka Vuln# (1) APEX04, (2) APEX20, and (3) APEX21.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5353 
Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, and Oracle Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors related to the Mod_rewrite Module, aka Vuln# OHS01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5354 
Unspecified vulnerability in Oracle HTTP Server 9.2.0.7 and 10.1.0.5, Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0, racle Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors, aka Vuln# OHS06.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5355 
Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, Collaboration Suite 9.0.4.2 and 10.1.2, and Oracle E-Business Suite and Applications 11.5.10CU2 has unknown impact and remote attack vectors, aka Vuln# SSO01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5356 
Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.1.0, and Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors, aka Vuln# OC4J02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5357 
Unspecified vulnerability in Oracle HTTP Server component in Oracle Application Server 10.1.2.0.1, 10.1.2.0.2, and 10.1.2.1.0 has unknown impact and remote attack vectors related to the PHP Module, aka Vuln# OHS03.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5358 
Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 has unknown impact and remote attack vectors, aka Vuln# FORM01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5359 
Multiple unspecified vulnerabilities in Oracle Reports Developer component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Oracle E-Business Suite and Applications 11.5.10CU2, have unknown impact and remote attack vectors, aka Vuln# (1) REP01 and (2) REP02. NOTE: as of 20061027, Oracle has not disputed reports from a reliable researcher that these issues are related to (a) showenv and (b) parsequery for REP01, and (c) cellwrapper and (d) delimiter for REP02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5360 
Unspecified vulnerability in Oracle Forms component in Oracle Application Server 9.0.4.2 has unknown impact and remote attack vectors, aka Vuln# FORM03.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5361 
Unspecified vulnerability in Oracle Containers for J2EE in Oracle Application Server 9.0.4.3, 10.1.2.0.0, and 10.1.2.0.1, and Oracle Collaboration Suite 9.0.4.2 and 10.1.2, has unknown impact and remote attack vectors, aka Vuln# OC4J03.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5362 
Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 10.1.3.0.0 has unknown impact and remote attack vectors, aka Vuln# OC4J04.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5363 
Unspecified vulnerability in Oracle Single Sign-On component in Oracle Application Server 10.1.2.0.1 and Collaboration Suite 10.1.2 has unknown impact and remote attack vectors, aka Vuln# SSO02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5364 
Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 9.0.4.1 and 10.1.2.0.2, and Collaboration Suite 10.1.2, has unknown impact and remote authenticated attack vectors, aka Vuln# OC4J05.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5365 
Unspecified vulnerability in Oracle Forms in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and E-Business Suite and Applications 11.5.10CU2, has unknown impact and remote attack vectors, aka Vuln# FORM02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5366 
Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and remote attack vectors related to (1) Oracle Containers for J2EE, aka Vuln# OC4J01, and (2) Oracle Process Mgmt & Notification, aka OPMN01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5367 
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.7 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS03 in Oracle Applications Framework, (2) APPS04 in Oracle Applications Technology Stack, and (3) APPS05 in Oracle Balanced Scorecard, (4) APPS09 in Oracle Scripting, and (5) APPS10 in Oracle Trading Community.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5368 
Unspecified vulnerability in Oracle Exchange component in Oracle E-Business Suite 6.2.4 has unknown impact and remote attack vectors, aka Vuln# APPS01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5369 
Unspecified vulnerability in Oracle Application Object Library in Oracle E-Business Suite 11.5.10CU2 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5370 
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS06 for Oracle CRM Gateway for Mobile Devices and (2) APPS08 for Oracle iStore.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5371 
Unspecified vulnerability in Oracle Email Center component in Oracle E-Business Suite 11.5.9 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS07.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5372 
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS11 for Oracle Universal Work Queue and (2) APPS12 for Oracle Application Object Library.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5373 
Unspecified vulnerability in Oracle Install Base component in Oracle E-Business Suite 11.5.10CU1 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS13.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5374 
Unspecified vulnerability in Oracle Pharmaceutical Applications 4.5.1 has unknown impact and remote authenticated attack vectors, aka Vuln# PHAR01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5375 
Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.46 GA, 8.47 GA, 8.48 GA, 8.46.15, 8.47.09, and 8.48.03 have unknown impact and remote attack vectors, aka Vuln# (1) PSE01, (2) PSE02, and (3) PSE03.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5376 
Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.22 GA, 8.46 GA, 8.47 GA, 8.48 GA, 8.22.11, 8.46.15, 8.47.09, and 8.48.03 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) PSE04, (2) PSE06, (3) PSE07, and (4) PSE08.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5377 
Unspecified vulnerability in PeopleSoft component in Oracle PeopleSoft Enterprise 8.80 GA, 8.90 GA, 8.8 Bundle 11, and 8.9 Bundle 4 has unknown impact and remote authenticated attack vectors, aka Vuln# PSE05.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5378 
Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23_O2, 8.95.P1, and 8.96.D1 has unknown impact and remote authenticated attack vectors, aka Vuln# JDE01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T01:00:00.000Z
CVE-2006-5379 
The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T10:00:00.000Z
CVE-2006-5380 
Remote file inclusion vulnerability in Contenido CMS allows remote attackers to execute arbitrary PHP code via a URL in the contenido_path parameter to (1) cms/dbfs.php or (2) cms/front_content.php.  NOTE: CVE disputes this issue for version 4.6.15, because $contenido_path is set to a static value
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T10:00:00.000Z
CVE-2006-5381 
Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database credentials and other information via a direct request to (1) db_msql.inc, (2) db_mssql.inc, (3) db_mysqli.inc, (4) db_oci8.inc, (5) db_odbc.inc, (6) db_oracle.inc, (7) db_pgsql.inc, or (8) db_sybase.inc in the conlib/ directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T10:00:00.000Z
CVE-2006-5382 
3Com Switch SS3 4400 switches, firmware 5.11, 6.00 and 6.10 and earlier, allow remote attackers to read the SNMP Read-Write Community string and conduct unauthorized actions via unspecified "normally restricted management packets on the device" that cause the community string to be returned.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-25T23:00:00.000Z
CVE-2006-5383 
SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T19:00:00.000Z
CVE-2006-5384 
PHP remote file inclusion vulnerability in modification/SendAlertEmail.php in CDS Software Consortium CDS Agenda 4.2.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AGE parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T19:00:00.000Z
CVE-2006-5385 
PHP remote file inclusion vulnerability in admin/admin_spam.php in the SpamOborona 1.0b and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T19:00:00.000Z
CVE-2006-5386 
PHP remote file inclusion vulnerability in process.php in NuralStorm Webmail 0.98b and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DEFAULT_SKIN parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T19:00:00.000Z
CVE-2006-5387 
PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272 and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T19:00:00.000Z
CVE-2006-5388 
SQL injection vulnerability in index.php in WebSPELL 4.01.01 and earlier allows remote attackers to execute arbitrary SQL commands via the getsquad parameter, a different vector than CVE-2006-4783.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T19:00:00.000Z
CVE-2006-5389 
tools/tellhim.php in PHP-Wyana allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T19:00:00.000Z
CVE-2006-5390 
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in the ACP User Registration (MMW) 1.00 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T19:00:00.000Z
CVE-2006-5391 
Xfire 1.64 and earlier allows remote attackers to cause a denial of service (client application crash) via a long string to UDP port 25777.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T19:00:00.000Z
CVE-2006-5392 
Multiple PHP remote file inclusion vulnerabilities in OpenDock FullCore 4.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) sw/index_sw.php; (2) cart.php, (3) lib_cart.php, (4) lib_read_cart.php, (5) lib_sys_cart.php, and (6) txt_info_cart.php in sw/lib_cart/; (7) comment.php, (8) find_comment.php, and (9) lib_comment.php in sw/lib_comment/; (10) sw/lib_find/find.php; and other unspecified PHP scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T19:00:00.000Z
CVE-2006-5393 
Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local users to read certain memory pages that were written during another user's SSL VPN session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T19:00:00.000Z
CVE-2006-5394 
The default configuration of Cisco Secure Desktop (CSD) has an unchecked "Disable printing" box in Secure Desktop Settings, which might allow local users to read data that was sent to a printer during another user's SSL VPN session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T19:00:00.000Z
CVE-2006-5395 
Buffer overflow in Microsoft Class Package Export Tool (aka clspack.exe) allows context-dependent attackers to execute arbitrary code via a long string.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T19:00:00.000Z
CVE-2006-5396 
The tcp_fuse_rcv_drain function in the Sun Solaris 10 kernel before 20061017, when TCP Fusion is enabled, allows local users to cause a denial of service (system crash) via a TCP loopback connection with both endpoints on the same system.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T19:00:00.000Z
CVE-2006-5397 
The Xinput module (modules/im/ximcp/imLcIm.c) in X.Org libX11 1.0.2 and 1.0.3 opens a file for reading twice using the same file descriptor, which causes a file descriptor leak that allows local users to read files specified by the XCOMPOSEFILE environment variable via the duplicate file descriptor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-03T00:00:00.000Z
CVE-2006-5398 
SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T23:00:00.000Z
CVE-2006-5399 
PHP remote file inclusion vulnerability in classes/Import_MM.class.php in PHPRecipeBook 2.36, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the g_rb_basedir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T23:00:00.000Z
CVE-2006-5400 
PHP remote file inclusion vulnerability in forum/track.php in CyberBrau 0.9.4, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T23:00:00.000Z
CVE-2006-5401 
PHP remote file inclusion vulnerability in template/barnraiser_01/p_new_password.tpl.php in AROUNDMe 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatePath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T23:00:00.000Z