rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-3661 
Cross-site scripting (XSS) vulnerability in Index.PHP in CuteNews 1.4.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T21:00:00.000Z
CVE-2006-3662 
SQL injection vulnerability in index.php in ATutor 1.5.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter. NOTE: this issue has been disputed by the vendor, who states "The mentioned SQL injection vulnerability is not possible."  However, the relevant source code suggests that this issue may be legitimate, and the parameter is cleansed in 1.5.3.1
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T21:00:00.000Z
CVE-2006-3663 
Finjan Vital Security Appliance 5100/8100 NG 8.3.5 stores passwords in plaintext in a backup file, which allows local users to gain privileges.  NOTE: the vendor has notified CVE that this issue was fixed in 8.3.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T21:00:00.000Z
CVE-2006-3664 
Unspecified vulnerability in NIS server on Sun Solaris 8, 9, and 10 allows local and remote attackers to cause a denial of service (ypserv hang) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T21:00:00.000Z
CVE-2006-3665 
SquirrelMail 1.4.6 and earlier, with register_globals enabled, allows remote attackers to hijack cookies in src/redirect.php via unknown vectors.  NOTE: while "cookie theft" is frequently associated with XSS, the vendor disclosure is too vague to be certain of this.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T21:00:00.000Z
CVE-2006-3666 
SQL injection vulnerability in AjaxPortal 3.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the 'Search' field, a different vulnerability than CVE-2006-3515.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T21:00:00.000Z
CVE-2006-3667 
Unspecified vulnerability in Sybase/Financial Fusion Consumer Banking Suite versions before 20060706 has unknown impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T21:00:00.000Z
CVE-2006-3668 
Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows user-assisted attackers to execute arbitrary code via a ".it" (Impulse Tracker) file with an envelope with a large number of nodes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T21:00:00.000Z
CVE-2006-3669 
Mercury Messenger, possibly 1.7.1.1 and other versions, when running on a multi-user Mac OS X platform, stores chat logs with world-readable permissions within the /Users directory, which allows local users to read the chat logs from other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-17T21:00:00.000Z
CVE-2006-3670 
Stack-based buffer overflow in Winlpd 1.26 allows remote attackers to execute arbitrary code via a long string in a request to TCP port 515.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T01:00:00.000Z
CVE-2006-3671 
Cross-site request forgery (CSRF) vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote attackers to perform unauthorized actions as other users via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T01:00:00.000Z
CVE-2006-3672 
KDE Konqueror 3.5.1 and earlier allows remote attackers to cause a denial of service (application crash) by calling the replaceChild method on a DOM object, which triggers a null dereference, as demonstrated by calling document.replaceChild with a 0 (zero) argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T01:00:00.000Z
CVE-2006-3673 
nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote attackers to cause a denial of service (application crash) via a large owner value, which causes an assert error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T01:00:00.000Z
CVE-2006-3674 
nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a large number handled by the id_req_handler function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T01:00:00.000Z
CVE-2006-3675 
Password Safe 2.11, 2.16 and 3.0BETA1 does not respect the configuration settings for locking the password database when certain dialogue windows are open, which might allow attackers with physical access to obtain the database contents.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-28T22:00:00.000Z
CVE-2006-3676 
admin/gallery_admin.php in planetGallery before 14.07.2006 allows remote attackers to execute arbitrary PHP code by uploading files with a double extension and directly accessing the file in the images directory, which bypasses a regular expression check for safe file types.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-21T18:00:00.000Z
CVE-2006-3677 
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-27T19:00:00.000Z
CVE-2006-3678 
TippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote attackers to "force the device into layer 2 fallback (L2FB)", causing a denial of service (page fault), via a malformed packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-26T23:00:00.000Z
CVE-2006-3679 
FatWire Content Server 5.5.0 allows remote attackers to bypass access restrictions and obtain administrative privileges via unspecified attack vectors in the authentication process.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3680 
Cross-site scripting (XSS) vulnerability in photocycle in Photocycle 1.0 allows remote attackers to inject arbitrary web script or HTML via the phpage parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3681 
Multiple cross-site scripting (XSS) vulnerabilities in awstats.pl in AWStats 6.5 build 1.857 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) refererpagesfilter, (2) refererpagesfilterex, (3) urlfilterex, (4) urlfilter, (5) hostfilter, or (6) hostfilterex parameters, a different set of vectors than CVE-2006-1945.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3682 
awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) year, (2) pluginmode or (3) month parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3683 
PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3684 
PHP remote file inclusion vulnerability in calendar.php in SoftComplex PHP Event Calendar 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_calendar parameter, which overwrites the $path_to_calendar variable from an extract function call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3685 
PHP remote file inclusion vulnerability in CzarNews 1.12 through 1.14 allows remote attackers to execute arbitrary PHP code via a URL in the tpath parameter to cn_config.php.  NOTE: the news.php vector is already covered by CVE-2005-0859.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3686 
Unspecified vulnerability in [SYSEXE]SMPUTIL.EXE in HP OpenVMS 7.3-2 allows local users and "remote users" to cause a denial of service (crash).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3687 
Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784, WBR-1310 Wireless G Router, WBR-2310 RangeBooster G Router, and EBR-2310 Ethernet Broadband Router allows remote attackers to execute arbitrary code via a long M-SEARCH request to UDP port 1900.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3688 
SQL injection vulnerability in Room.php in Francisco Charrua Photo-Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3689 
PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZ[Lite] allows remote attackers to execute arbitrary PHP code via a URL in the myadmindir parameter.  NOTE: this issue has been disputed by a third party that claims that " the myadmindir variable is set before any GET variables are processed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3690 
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) components/com_minibb.php or (2) components/minibb/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3691 
Multiple SQL injection vulnerabilities in VBZooM 1.11 and earlier allow remote attackers to execute arbitrary SQL commands via the UserID parameter to (1) ignore-pm.php, (2) sendmail.php, (3) reply.php or (4) sub-join.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3692 
PHP remote file inclusion vulnerability in enduser/listmessenger.php in ListMessenger 0.9.3 allows remote attackers to execute arbitrary PHP code via a URL in the lm_path parameter.  NOTE: the vendor has disputed this issue to SecurityTracker, stating that the $lm_path variable is set to a constant value.  As of 20060726, CVE concurs with the vendor based on SecurityTracker's post-disclosure analysis
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-18T21:00:00.000Z
CVE-2006-3693 
Rocks Clusters 4.1 and earlier allows local users to gain privileges via commands enclosed with escaped backticks (\`) in an argument to the (1) mount-loop (mount-loop.c) or (2) umount-loop (umount-loop.c) command, which is not filtered in a system function call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T01:00:00.000Z
CVE-2006-3694 
Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T01:00:00.000Z
CVE-2006-3695 
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers to read arbitrary files, perform cross-site scripting (XSS) attacks, or cause a denial of service via unspecified vectors. NOTE: this might be related to CVE-2006-3458.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T01:00:00.000Z
CVE-2006-3696 
filtnt.sys in Outpost Firewall Pro before 3.51.759.6511 (462) allows local users to cause a denial of service (crash) via long arguments to mshta.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T01:00:00.000Z
CVE-2006-3697 
Agnitum Outpost Firewall Pro 3.51.759.6511 (462), as used in (1) Lavasoft Personal Firewall 1.0.543.5722 (433) and (2) Novell BorderManager Novell Client Firewall 2.0, does not properly restrict user activities in application windows that run in a LocalSystem context, which allows local users to gain privileges and execute commands (a) via the "open folder" option when no instance of explorer.exe is running, possibly related to the ShellExecute API function; or (b) by overwriting a batch file through the "Save Configuration As" option. NOTE: this might be a vulnerability in Microsoft Windows and explorer.exe instead of the firewall.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T01:00:00.000Z
CVE-2006-3698 
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB01 for Change Data Capture (CDC) component and (2) DB03 for Data Pump Metadata API.  NOTE: as of 20060719, Oracle has not disputed a claim by a reliable researcher that DB01 is related to multiple SQL injection vulnerabilities in SYS.DBMS_CDC_IMPDP using the (a) IMPORT_CHANGE_SET, (b) IMPORT_CHANGE_TABLE, (c) IMPORT_CHANGE_COLUMN, (d) IMPORT_SUBSCRIBER, (e) IMPORT_SUBSCRIBED_TABLE, (f) IMPORT_SUBSCRIBED_COLUMN, (g) VALIDATE_IMPORT, (h) VALIDATE_CHANGE_SET, (i) VALIDATE_CHANGE_TABLE, and (j) VALIDATE_SUBSCRIPTION procedures, and that DB03 is for SQL injection in the MAIN procedure for SYS.KUPW$WORKER.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3699 
Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5 and 9.2.0.6 has unknown impact and attack vectors, aka Oracle Vuln# DB02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3700 
Multiple unspecified vulnerabilities in Oracle Database 9.2.0.6 and 10.1.0.4 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB04 for Web Distributed Authoring and Versioning (DAV) and (2) DB23 for XMLDB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3701 
Unspecified vulnerability in the Dictionary component in Oracle Database 8.1.7.4, 9.0.1.5, and 9.2.0.6 has unknown impact and attack vectors, aka Oracle Vuln# DB05.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3702 
Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB06 in Export; (2) DB08, (3) DB09, (4) DB10, (5) DB11, (6) DB12, (7) DB13, (8) DB14, and (9) DBC01 for OCI; (10) DB16 for Query Rewrite/Summary Mgmt; (11) DB17, (12) DB18, (13) DB19, (14) DBC02, (15) DBC03, and (16) DBC04 for RPC; and (17) DB20 for Semantic Analysis.  NOTE: as of 20060719, Oracle has not disputed third party claims that DB06 is related to "SQL injection" using DBMS_EXPORT_EXTENSION with a modified ODCIIndexGetMetadata routine and a call to GET_DOMAIN_INDEX_METADATA, in which case DB06 might be CVE-2006-2081.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3703 
Unspecified vulnerability in InterMedia for Oracle Database 9.0.1.5, 9.2.0.6, and 10.1.0.4 has unknown impact and attack vectors, aka oracle Vuln# DB07.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3704 
Unspecified vulnerability in the Oracle ODBC Driver for Oracle Database 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# 10.1.0.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3705 
Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 have unknown impact and attack vectors, aka Oracle Vuln# (1) DB21 for Statistics and (2) DB22 for Upgrade & Downgrade.  NOTE: as of 20060719, Oracle has not disputed a claim by a reliable researcher that DB21 is for a local SQL injection vulnerability in SYS.DBMS_STATS, and that DB22 is for SQL injection in SYS.DBMS_UPGRADE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3706 
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3 has unknown impact and attack vectors, aka Oracle Vuln# AS01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3707 
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3 and 9.0.3.1 has unknown impact and attack vectors, aka Oracle Vuln# AS02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3708 
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, 10.1.2.0.2, and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS03.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3709 
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, and 10.1.2.0.0 has unknown impact and attack vectors, aka Oracle Vuln# AS04.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3710 
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, 9.0.4.2, and 10.1.2.0.0 has unknown impact and attack vectors, aka Oracle Vuln# (1) AS05 and (2) AS08.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3711 
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.2.3, 9.0.3.1, and 9.0.4.1 has unknown impact and attack vectors, aka Oracle Vuln# AS06.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3712 
Unspecified vulnerability in OC4J for Oracle Application Server 9.0.4.2 and 10.1.2.0.0 has unknown impact and attack vectors, aka Oracle Vuln# AS07.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3713 
Unspecified vulnerability in OC4J for Oracle Application Server 10.1.3.0 has unknown impact and attack vectors, aka Oracle Vuln# AS09.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3714 
Unspecified vulnerability in OC4J for Oracle Application Server 10.1.2.0.2 and 10.1.2.1 has unknown impact and attack vectors, aka Oracle Vuln# AS10.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3715 
Unspecified vulnerability in Calendar for Oracle Collaboration Suite 10.1.2 has unknown impact and attack vectors, aka Oracle Vuln# OCS01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3716 
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, aka Oracle Vuln# (1) APPS01 for Internet Expenses; (2) APPS02, (3) APPS05, (4) APPS06, (5) APPS07, (6) APPS08, (7) APPS09, and (8) APPS10 for Oracle Application Object Library; (9) APPS11, (10) APPS12, and (11) APPS13 for Oracle Applications Technology Stack; (12) APPS14 for Oracle Call Center Technology; (13) APPS15 for Oracle Common Applications; (14) APPS18 for Oracle Self-Service Web Applications; and (15) APPS19 for Oracle Workflow Cartridge.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3717 
Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.9 have unknown impact and attack vectors, aka Oracle Vuln# (1) APPS03 and (2) APPS04 for Oracle Application Object Library; and (3) APPS20 for Oracle XML Gateway.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3718 
Multiple unspecified vulnerabilities in Oracle Exchange for Oracle E-Business Suite and Applications 6.2.4 have unknown impact and attack vectors, aka Oracle Vuln# (1) APPS16 and (2) APPS17.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3719 
Unspecified vulnerability in CORE: Repository for Oracle Enterprise Manager 9.0.1.0 and 9.2.0.1 has unknown impact and attack vectors, aka Oracle Vuln# EM01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3720 
Unspecified vulnerability in Enterprise Config Management for Oracle Enterprise Manager 10.1.0.3 has unknown impact and attack vectors, aka Oracle Vuln# EM02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3721 
Multiple unspecified vulnerabilities in Oracle Management Service for Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors, aka Oracle Vuln# EM03 and EM04.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3722 
Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.4 Bundle #16, 8.8 Bundle #10, and 8.9 Bundle #3 has unknown impact and attack vectors, aka Oracle Vuln# PSE01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3723 
Unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.8 with Enforcer Portal Pack Bundle #10 and 8.9 Bundle #3 has unknown impact and attack vectors, aka Oracle Vuln# PSE02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3724 
Unspecified vulnerability in JD Edwards HTML Server for Oracle OneWorld Tools EnterpriseOne Tools 8.95 and 8.96 has unknown impact and attack vectors, aka Oracle Vuln# JDE01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T10:00:00.000Z
CVE-2006-3725 
Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service (crash) via certain RegSaveKey, RegRestoreKey and RegDeleteKey operations on the (1) HKLM\SYSTEM\CurrentControlSet\Services\SNDSrvc and (2) HKLM\SYSTEM\CurrentControlSet\Services\SymEvent registry keys.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T21:00:00.000Z
CVE-2006-3726 
Buffer overflow in FileCOPA FTP Server before 1.01 released on 18th July 2006, allows remote authenticated attackers to execute arbitrary code via a long argument to the LIST command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-19T21:00:00.000Z