rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-4516 
Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and kernel panic) via a PT_LWPINFO ptrace command with a large negative data value that satisfies a signed maximum value check but is used in an unsigned copyout function call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-12T00:00:00.000Z
CVE-2006-4517 
Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-01T15:00:00.000Z
CVE-2006-4518 
Qbik WinGate 6.1.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a DNS request with a self-referencing compressed name pointer, which triggers an infinite loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-28T23:00:00.000Z
CVE-2006-4519 
Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-07-10T18:00:00.000Z
CVE-2006-4520 
ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service (daemon crash) when the heap is written to a log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-30T22:00:00.000Z
CVE-2006-4521 
The BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module in Novell eDirectory 8.8 and 8.8.1 before the Security Services 2.0.3 patch does not properly increment a pointer when handling certain input, which allows remote attackers to cause a denial of service (invalid memory access) via a crafted login request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-04T00:00:00.000Z
CVE-2006-4522 
Unspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code with root privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-01T23:00:00.000Z
CVE-2006-4523 
The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote attackers to cause a denial of service (crash) via a CRLF sequence in a GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-01T23:00:00.000Z
CVE-2006-4524 
Multiple SQL injection vulnerabilities in login_verif.asp in Digiappz Freekot 1.01 allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) password parameters.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-01T23:00:00.000Z
CVE-2006-4525 
Cross-site scripting (XSS) vulnerability in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the links array.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-01T23:00:00.000Z
CVE-2006-4526 
SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the searchArray[] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-01T23:00:00.000Z
CVE-2006-4527 
includes/content/gateway.inc.php in CubeCart 3.0.12 and earlier, when magic_quotes_gpc is disabled, uses an insufficiently restrictive regular expression to validate the gateway parameter, which allows remote attackers to conduct PHP remote file inclusion attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-01T23:00:00.000Z
CVE-2006-4528 
Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) recherche parameter in recherchemembre.php and the (2) email parameter in test.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-01T23:00:00.000Z
CVE-2006-4529 
SQL injection vulnerability in recherchemembre.php in membrepass 1.5. allows remote attackers to execute arbitrary SQL commands via the recherche parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-01T23:00:00.000Z
CVE-2006-4530 
Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows remote attackers to execute arbitrary PHP code via the aifon parameter, which is injected into include/variable.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-01T23:00:00.000Z
CVE-2006-4531 
PHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-01T23:00:00.000Z
CVE-2006-4532 
PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System (YACS) CMS 6.6.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the context[path_to_root] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-01T23:00:00.000Z
CVE-2006-4533 
Multiple PHP remote file inclusion vulnerabilities in Plume CMS 1.0.6 and earlier allow remote attackers to execute arbitrary PHP code via the _PX_config[manager_path] parameter to (1) articles.php, (2) categories.php, (3) news.php, (4) prefs.php, (5) sites.php, (6) subtypes.php, (7) users.php, (8) xmedia.php, (9) frontinc/class.template.php, (10) inc/lib.text.php, (11) install/index.php, (12) install/upgrade.php, and (13) tools/htaccess/index.php.  NOTE: other vectors are covered by CVE-2006-3562, CVE-2006-2645, and CVE-2006-0725.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-01T23:00:00.000Z
CVE-2006-4534 
Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-05T17:00:00.000Z
CVE-2006-4535 
The Linux kernel 2.6.17.10 and 2.6.17.11 and 2.6.18-rc5 allows local users to cause a denial of service (crash) via an SCTP socket with a certain SO_LINGER value, possibly related to the patch for CVE-2006-3745.  NOTE: older kernel versions for specific Linux distributions are also affected, due to backporting of the CVE-2006-3745 patch.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T19:00:00.000Z
CVE-2006-4536 
SQL injection vulnerability in module/rejestracja.php in CMS Frogss 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the podpis parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-05T18:00:00.000Z
CVE-2006-4537 
NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows local users to obtain passwords by reading the file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-05T18:00:00.000Z
CVE-2006-4538 
Linux kernel 2.6.17 and earlier, when running on IA64 or SPARC platforms, allows local users to cause a denial of service (crash) via a malformed ELF file that triggers memory maps that cross region boundaries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-05T19:00:00.000Z
CVE-2006-4539 
(1) includes/widgets/module_company_tickets.php and (2) includes/widgets/module_track_tickets.php Client Support Center in Cerberus Helpdesk 3.2 Build 317, and possibly earlier, allows remote attackers to bypass security restrictions and obtain sensitive information via the ticket parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-05T23:00:00.000Z
CVE-2006-4540 
Cross-site scripting (XSS) vulnerability in learncenter.asp in Learn.com LearnCenter allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-05T23:00:00.000Z
CVE-2006-4541 
RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service (crash) via a NULL third argument to the NtOpenSection API function. NOTE: it was later reported that 3.6.cqn is also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-05T23:00:00.000Z
CVE-2006-4542 
Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows remote attackers to conduct cross-site scripting (XSS), read CGI program source code, list directories, and possibly execute programs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-05T23:00:00.000Z
CVE-2006-4543 
Cross-site scripting (XSS) vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the (1) game parameter in players mode, the (2) weapon parameter in weaponinfo mode, the (3) st parameter in search mode, the (4) action parameter in actioninfo mode, and the (5) map parameter in mapinfo mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4544 
Multiple PHP remote file inclusion vulnerabilities in ExBB 1.9.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the exbb[home_path] parameter in files in the modules directory including (1) birstday/birst.php (2) birstday/select.php, (3) birstday/profile_show.php, (4) newusergreatings/pm_newreg.php, (5) punish/p_error.php, (6) punish/profile.php, and (7) threadstop/threadstop.php.  NOTE: the (8) modules/userstop/userstop.php vector might overlap CVE-2006-4488, although it is for a slightly different product from the same vendor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4545 
PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows remote attackers to execute arbitrary PHP code via the _SERVER parameter in (1) admin/avatar.php, (2) libs/archive.class.php, (3) libs/login.php, (4) libs/profiles.class.php, and (5) libs/profile/proccess.php.  NOTE: CVE disputes this claim, as the _SERVER array and the _SERVER[DOCUMENT_ROOT] index are controlled by PHP and cannot be manipulated by an attacker
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4546 
Lyris ListManager 8.95 allows remote authenticated users, who have administrative privileges for at least one list on the server, to add new administrators to any list via a modified MEMBERS_.List_ parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4547 
Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user with a ' (single quote) character in the name, which reveals the details of the underlying SQL query, possibly because of a forced SQL error or SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4548 
e107 0.75 and earlier does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary PHP code via the tinyMCE_imglib_include image/jpeg parameter in e107_handlers/tiny_mce/plugins/ibrowser/ibrowser.php, as demonstrated by a multipart/form-data request.  NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in e107.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4549 
CHXO Feedsplitter 2006-01-21 allows remote attackers to read the source code of feedsplitter.php via the showsource function.  NOTE: this issue is not a vulnerability in standard distributions, but could be an issue if the source has been modified.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4550 
Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files via .. (dot dot) sequences in the format parameter with a leading ".", which bypasses a security check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4551 
Eval injection vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to execute arbitrary PHP code via (1) the file specified as the value of the format parameter, and possibly (2) the RSS feed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4552 
Cross-site scripting (XSS) vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to inject arbitrary web script or HTML via the RSS feed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4553 
PHP remote file inclusion vulnerability in plugin.class.php in the com_comprofiler Components 1.0 RC2 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4554 
Stack-based buffer overflow in the ReadFile function in the ZOO-processing exports in the BeCubed Compression Plus before 5.0.1.28, as used in products including (1) Tumbleweed EMF, (2) VCOM/Ontrack PowerDesk Pro, (3) Canyon Drag and Zip, (4) Canyon Power File, and (5) Canyon Power File Gold, allow context-dependent attackers to execute arbitrary code via an inconsistent size parameter in a ZOO file header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4555 
Buffer overflow in the Retro64 / Miniclip CR64Loader ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors involving an HTML document that references the CLSID of the control.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4556 
PHP remote file inclusion vulnerability in index.php in the JIM component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: another researcher has stated that the product distribution does not include an index.php file.  Also, this might be related to CVE-2006-4242
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4557 
PHP remote file inclusion vulnerability in plugins/plugins.php in Bob Jewell Discloser 0.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the type parameter.  NOTE: another researcher has stated that an attacker cannot control the type parameter.  As of 20060901, CVE analysis concurs with the dispute
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4558 
DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to execute arbitrary PHP code by uploading files with double extensions via the fileupload parameter in a newthread action in newpost.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4559 
Multiple PHP remote file inclusion vulnerabilities in Yet Another Community System (YACS) CMS 6.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the context[path_to_root] parameter in (1) articles/populate.php, (2) categories/category.php, (3) categories/populate.php, (4) comments/populate.php, (5) files/file.php, (6) sections/section.php, (7) sections/populate.php, (8) tables/populate.php, (9) users/user.php, and (10) users/populate.php.  The articles/article.php vector is covered by CVE-2006-4532.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4560 
Internet Explorer 6 on Windows XP SP2 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with an arbitrary intranet web server, by hosting script on an Internet web server that can be made inaccessible by the attacker and that has a domain name under the attacker's control, which can force the browser to drop DNS pinning and perform a new DNS query for the domain name after the script is already running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4561 
Mozilla Firefox 1.5.0.6 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with an arbitrary intranet web server, by hosting script on an Internet web server that can be made inaccessible by the attacker and that has a domain name under the attacker's control, which can force the browser to drop DNS pinning and perform a new DNS query for the domain name after the script is already running.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4562 
The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hiding the source IP address of the attacker.  NOTE: another researcher has stated that the default configuration does not proxy DNS queries received on the external interface
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4563 
Cross-site scripting (XSS) vulnerability in the MyHeadlines before 4.3.2 module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the myh_op parameter to modules.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T01:00:00.000Z
CVE-2006-4564 
SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote attackers to execute arbitrary SQL commands via the cur_cat parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T01:00:00.000Z
CVE-2006-4565 
Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a JavaScript regular expression with a "minimal quantifier."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T18:00:00.000Z
CVE-2006-4566 
Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) via a malformed JavaScript regular expression that ends with a backslash in an unterminated character set ("[\\"), which leads to a buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T18:00:00.000Z
CVE-2006-4567 
Mozilla Firefox before 1.5.0.7 and Thunderbird before 1.5.0.7 makes it easy for users to accept self-signed certificates for the auto-update mechanism, which might allow remote user-assisted attackers to use DNS spoofing to trick users into visiting a malicious site and accepting a malicious certificate for the Mozilla update site, which can then be used to install arbitrary code on the next update.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T18:00:00.000Z
CVE-2006-4568 
Mozilla Firefox before 1.5.0.7 and SeaMonkey before 1.0.5 allows remote attackers to bypass the security model and inject content into the sub-frame of another site via targetWindow.frames[n].document.open(), which facilitates spoofing and other attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T19:00:00.000Z
CVE-2006-4569 
The popup blocker in Mozilla Firefox before 1.5.0.7 opens the "blocked popups" display in the context of the Location bar instead of the subframe from which the popup originated, which might make it easier for remote user-assisted attackers to conduct cross-site scripting (XSS) attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T19:00:00.000Z
CVE-2006-4570 
Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forwards, or replies to the original message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T19:00:00.000Z
CVE-2006-4571 
Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified vectors, some of which involve JavaScript, and possibly large images or plugin data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T19:00:00.000Z
CVE-2006-4572 
ip6_tables in netfilter in the Linux kernel before 2.6.16.31 allows remote attackers to (1) bypass a rule that disallows a protocol, via a packet with the protocol header not located immediately after the fragment header, aka "ip6_tables protocol bypass bug;" and (2) bypass a rule that looks for a certain extension header, via a packet with an extension header outside the first fragment, aka "ip6_tables extension header bypass bug."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-07T00:00:00.000Z
CVE-2006-4573 
Multiple unspecified vulnerabilities in the "utf8 combining characters handling" (utf8_handle_comb function in encoding.c) in screen before 4.0.3 allows user-assisted attackers to cause a denial of service (crash or hang) via certain UTF8 sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-24T18:00:00.000Z
CVE-2006-4574 
Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger an assertion error related to unexpected length values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-28T00:00:00.000Z