rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-4115 
PHP remote file inclusion vulnerability in common.inc.php in PgMarket 2.2.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the CFG[libdir] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T21:00:00.000Z
CVE-2006-4116 
Multiple stack-based buffer overflows in Lhaz before 1.32 allow user-assisted attackers to execute arbitrary code via a long filename in (1) an LHZ archive, when saving the filename during extraction; and (2) an LHZ archive with an invalid CRC checksum, when constructing an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T21:00:00.000Z
CVE-2006-4117 
The squeue_drain function in Sun Solaris 10, possibly only when run on CMT processors, allows remote attackers to cause a denial of service ("bad trap" and system panic) by opening and closing a large number of TCP connections ("heavy TCP/IP loads").  NOTE: the original report specifies the function name as "drain_squeue," but this is likely incorrect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T21:00:00.000Z
CVE-2006-4118 
Multiple SQL injection vulnerabilities in GeheimChaos 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Temp_entered_login or (2) Temp_entered_email parameters to (a) gc.php, and in multiple parameters in (b) include/registrieren.php, possibly involving the (3) $form_email, (4) $form_vorname, (5) $form_nachname, (6) $form_strasse, (7) $form_plzort, (8) $form_land, (9) $form_homepage, (10) $form_bildpfad, (11) $form_profilsichtbar, (12) $Temp_sprache, (13) $form_tag, (14) $form_monat, (15) $form_jahr, (16) $Temp_akt_string, (17) $form_icq, (18) $form_msn, (19) $form_yahoo, (20) $form_username, and (21) $Temp_form_pass variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4119 
SQL injection vulnerability in gc.php in GeheimChaos 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the Temp_entered_password parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4120 
Cross-site scripting (XSS) vulnerability in the Recipe module (recipe.module) before 1.54 for Drupal 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4121 
PHP remote file inclusion vulnerability in owimg.php3 in See-Commerce 1.0.625 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4122 
Simple one-file guestbook 1.0 and earlier allows remote attackers to bypass authentication and delete guestbook entries via a modified id parameter to guestbook.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4123 
PHP remote file inclusion vulnerability in boitenews4/index.php in Boite de News 4.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the url_index parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4124 
The libXm library in LessTif 0.95.0 and earlier allows local users to gain privileges via the DEBUG_FILE environment variable, which is used to create world-writable files when libXm is run from a setuid program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4125 
Stack-based buffer overflow in main.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to execute arbitrary code via a large nickname, which is not properly handled by the listen_thread_udp function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4126 
The dc_chat function in cmd.dc.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to cause a denial of service (application crash) by sending a client message before providing the nickname, which triggers a null pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4127 
Multiple format string vulnerabilities in DConnect Daemon 0.7.0 and earlier allow remote administrators to execute arbitrary code via format string specifiers that are not properly handled when calling the (1) privmsg() or (2) pubmsg functions from (a) cmd.user.c, (b) penalties.c, or (c) cmd.dc.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4128 
Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 (all builds), Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 (builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and 10.1.327.401), and Backup Exec for Windows Server and Remote Agent 9.1 (build 9.1.4691), 10.0 (builds 10.0.5484 and 10.0.5520), and 10.1 (build 10.1.5629) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted RPC message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4129 
PHP remote file inclusion vulnerability in admin.webring.docs.php in the Webring Component (com_webring) 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the component_dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4130 
PHP remote file inclusion vulnerability in admin.remository.php in the Remository Component (com_remository) 3.25 and earlier for Mambo and Joomla!, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4131 
Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted MMS (Multimedia Messaging Service) messages that trigger the overflows in the (1) M-Notification.ind, (2) M-Retrieve.conf (Header and Body), or (3) SMIL parsers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4132 
ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service (resource exhaustion and application crash) via WAPPush messages to UDP port UDP 2948.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4133 
Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the overflow during error message construction when the _snprintf function returns a negative value that is used in a memcpy operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4134 
Unspecified vulnerability related to a "design flaw" in SAP Internet Graphics Service (IGS) 6.40 and earlier and 7.00 and earlier allows remote attackers to cause a denial of service (service shutdown) via certain HTTP requests.  NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4135 
PHP remote file inclusion vulnerability in cal_config.inc.php in Calendarix 0.7.20060401 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the calpath parameter.  NOTE: this issue has been disputed by a third party, who says that the affected $calpath variable is set to a constant value in the beginning of the script. CVE concurs that the initial report is invalid
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4136 
Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving (1) "SOAP requests and responses", (2) mbean, (3) ThreadIdentitySupport, and possibly others.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4137 
IBM WebSphere Application Server before 6.1.0.1 allows attackers to obtain sensitive information via unspecified vectors related to (1) the log file, (2) "script generated syntax on wsadmin command line," and (3) traces.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4138 
Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers to execute arbitrary code via crafted HLP files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4139 
Race condition in Sun Solaris 10 allows attackers to cause a denial of service (system panic) via unspecified vectors related to ifconfig and either netstat or SNMP queries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4140 
Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitrary files via modified .. (dot dot) sequences in the URL, including (1) "..%2f" (encoded "/" slash), "..../" (multiple dot), and "..%255c../" (double-encoded "\" backslash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4141 
SQL injection vulnerability in news.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) sortby and (2) sortorder parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4142 
SQL injection vulnerability in extra/online.php in Virtual War (VWar) 1.5.0 R14 and earlier allows remote attackers to execute arbitrary SQL commands via the n parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T23:00:00.000Z
CVE-2006-4143 
Netgear FVG318 running firmware 1.0.40 allows remote attackers to cause a denial of service (router reset) via TCP packets with bad checksums.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-15T00:00:00.000Z
CVE-2006-4144 
Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-15T23:00:00.000Z
CVE-2006-4145 
The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-21T19:00:00.000Z
CVE-2006-4146 
Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-31T22:00:00.000Z
CVE-2006-4154 
Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a set_var function call in (1) tcl_cmds.c and (2) tcl_core.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-16T19:00:00.000Z
CVE-2006-4155 
Unspecified vulnerability in func_topic_threaded.php (aka threaded view mode) in Invision Power Board (IPB) before 2.1.7 21013.60810.s allows remote attackers to "access posts outside the topic."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-16T21:00:00.000Z
CVE-2006-4156 
PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtotemplate parameter.  NOTE: a third party claims that the researcher is incorrect, because template.php defines pathtotemplate before big.php uses pathtotemplate.  CVE has not verified either claim, but during August 2006, the original researcher made several significant errors regarding this bug type
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-16T21:00:00.000Z
CVE-2006-4157 
Cross-site scripting (XSS) vulnerability in index.php in Yet another Bulletin Board (YaBB) allows remote attackers to inject arbitrary web script or HTML via the categories parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-16T21:00:00.000Z
CVE-2006-4158 
PHP remote file inclusion vulnerability in Login.php in Spaminator 1.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-16T21:00:00.000Z
CVE-2006-4159 
Multiple PHP remote file inclusion vulnerabilities in Chaussette 080706 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _BASE parameter to scripts in Classes/ including (1) Evenement.php, (2) Event.php, (3) Event_for_month.php, (4) Event_for_week.php, (5) My_Log.php, (6) My_Smarty.php, and possibly (7) Event_for_month_per_day.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-16T21:00:00.000Z
CVE-2006-4160 
Multiple PHP remote file inclusion vulnerabilities in Tony Bibbs and Vincent Furia MVCnPHP 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the glConf[path_library] parameter to (1) BaseCommand.php, (2) BaseLoader.php, and (3) BaseView.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-16T21:00:00.000Z
CVE-2006-4161 
Directory traversal vulnerability in the avatar_gallery action in profile.php in XennoBB 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the category parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-16T21:00:00.000Z
CVE-2006-4162 
Cross-site scripting (XSS) vulnerability in Dragonfly CMS 9.0.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-16T21:00:00.000Z
CVE-2006-4163 
PHP remote file inclusion vulnerability in cls_fast_template.php in myWebland miniBloggie 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fname parameter.  NOTE: another researcher was unable to find a way to execute code after including it via a URL.  CVE analysis as of 20060816 was inconclusive
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-16T21:00:00.000Z
CVE-2006-4164 
PHP remote file inclusion vulnerability in inc/header.inc.php in phpPrintAnalyzer 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ficStyle parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-16T21:00:00.000Z
CVE-2006-4165 
Cross-site scripting (XSS) vulnerability in NetCommons 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-16T21:00:00.000Z
CVE-2006-4166 
PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the image parameter to (1) image.php or (2) image.php2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-16T21:00:00.000Z
CVE-2006-4168 
Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via an image with many EXIF components, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-14T19:00:00.000Z
CVE-2006-4169 
Multiple directory traversal vulnerabilities in the G/PGP (GPG) Plugin 2.0, and 2.1dev before 20070614, for Squirrelmail allow remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the help parameter to (1) gpg_help.php or (2) gpg_help_base.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-15T22:00:00.000Z
CVE-2006-4172 
Integer overflow vulnerability in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows local users to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2006-4178.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-26T01:43:00.000Z
CVE-2006-4175 
The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malformed BER queries, which trigger a free of uninitialized memory locations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-26T23:00:00.000Z
CVE-2006-4177 
Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted NCP over IP packet that causes NCP to read more data than intended.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-24T20:00:00.000Z
CVE-2006-4178 
Integer signedness error in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows local users to cause a denial of service (crash) via unspecified arguments that use negative signed integers to cause the bzero function to be called with a large length parameter, a different vulnerability than CVE-2006-4172.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-26T01:43:00.000Z
CVE-2006-4181 
Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-28T02:00:00.000Z
CVE-2006-4182 
Integer overflow in ClamAV 0.88.1 and 0.88.4, and other versions before 0.88.5, allows remote attackers to cause a denial of service (scanning service crash) and execute arbitrary code via a crafted Portable Executable (PE) file that leads to a heap-based buffer overflow when less memory is allocated than expected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-16T23:00:00.000Z
CVE-2006-4183 
Heap-based buffer overflow in Microsoft DirectX SDK (February 2006) and probably earlier, including 9.0c End User Runtimes, allows context-dependent attackers to execute arbitrary code via a crafted Targa file with a run-length-encoding (RLE) compression that produces more data than expected when decoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-18T23:00:00.000Z
CVE-2006-4184 
SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists (ACL) in raw mode, which allows local users to bypass NTFS controls and obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T00:00:00.000Z
CVE-2006-4185 
Unspecified vulnerability in the NCPENGINE in Novell eDirectory 8.7.3.8 allows local users to cause a denial of service (CPU consumption) via unspecified vectors, as originally demonstrated using a Nessus scan.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T00:00:00.000Z
CVE-2006-4186 
The iManager in eMBoxClient.jar in Novell eDirectory 8.7.3.8 writes passwords in plaintext to a log file, which allows local users to obtain passwords by reading the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T00:00:00.000Z
CVE-2006-4187 
Unspecified vulnerability in HP-UX B.11.00, B.11.11 and B.11.23, when running in trusted mode, allows local users to cause a denial of service via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T00:00:00.000Z
CVE-2006-4188 
Unspecified vulnerability in the LP subsystem in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T00:00:00.000Z
CVE-2006-4189 
Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) index.php, (2) aemodule.php, (3) browse.php, (4) cc.php, (5) click.php, (6) faq.php, (7) gallery.php, (8) im.php, (9) inbox.php, (10) join_form.php, (11) logout.php, (12) messages_inbox.php, and many other scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T01:00:00.000Z
CVE-2006-4190 
Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbitrary files via a .. (dot dot) in the name parameter for a modload operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T01:00:00.000Z
CVE-2006-4191 
Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T01:00:00.000Z